Sign in

v8

latestOpenAPI 3.1.0raw.githubusercontent.com2026-07-05730512.7 KB
Trust Registry

Add a trusted issuer

Register an issuer whose credentials this tenant accepts. Didit ID uses the issuer identifier and trust anchor when it verifies presented credentials. The new entry starts as active.

post/v1/trusted-issuers

Request body

namestring required

You set the trusted issuer display name.

issstring uri required

You set the issuer identifier that credentials must match.

trust_anchorstring

You set the signing-key anchor type. Use https-jwks for a JSON Web Key Set (JWKS) based issuer.

frameworkstring

You set the trust framework slug to associate with this issuer.

jwks_uristring uri

You optionally set the JSON Web Key Set (JWKS) endpoint used to resolve the issuer signing keys.

didstring

You optionally set the decentralized identifier (DID) for the issuer.

Example request

{
  "name": "Gov PID Issuer",
  "iss": "http://localhost:8011/v1/issuers/docs-external-issuer-9r79lx",
  "trust_anchor": "https-jwks",
  "framework": "acme-partner-framework-ypr5",
  "jwks_uri": "https://issuer.gov.example/.well-known/jwks.json"
}

Response

The trusted issuer was registered.

idstring uuid

You receive the UUID for the trusted issuer registry entry.

namestring

You receive the trusted issuer display name.

issstring uri

You receive the issuer identifier that credentials must match.

trust_anchorstring

You receive the signing-key anchor type. https-jwks resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.

jwks_uristring

You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.

didstring

You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.

statusstring

You receive the trust-gate status for this issuer.

added_bystring

You receive the principal that registered this trusted issuer.

frameworkstring nullable

You receive the associated framework slug, or null when the issuer is not tied to one.

created_atstring date-time

You receive the timestamp when this trusted issuer was registered.

validation_statestring

You receive the trust-anchor validation state: unverified, verified, or failed.

last_validated_atstring date-time nullable

You receive the timestamp of the most recent validation run, or null when the issuer has never been validated.

Example response

{
  "id": "18d3239a-4a0e-412b-9487-17ce7dc3bb8e",
  "name": "Gov PID Issuer",
  "iss": "http://localhost:8011/v1/issuers/docs-external-issuer-9r79lx",
  "trust_anchor": "https-jwks",
  "status": "active",
  "added_by": "TenantPrincipal<docs-capture-6clew6:owner>",
  "framework": "acme-partner-framework-ypr5",
  "created_at": "2026-07-02T23:33:35.153496+00:00",
  "validation_state": "unverified"
}