v8

latestOpenAPI 3.1.0raw.githubusercontent.com2026-07-05730512.7 KB

Trust Registry

List trusted issuers

List the issuers this tenant trusts when verifying presented credentials. Didit ID rejects credentials whose iss value does not match an active trusted issuer. The response is a bare JSON array ordered by most recent creation time.

get/v1/trusted-issuers

Response

A bare JSON array of trusted issuer objects for the caller's tenant.

added_bystring

You receive the principal that registered this trusted issuer.

created_atstring date-time

You receive the timestamp when this trusted issuer was registered.

didstring

You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.

frameworkstring

You receive the associated framework slug, or null when the issuer is not tied to one.

idstring uuid

You receive the UUID for this trusted issuer registry entry.

issstring uri

You receive the issuer identifier that credentials must match.

jwks_uristring

You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.

namestring

You receive the trusted issuer display name.

statusstring

You receive the trust-gate status for this issuer.

trust_anchorstring

You receive the signing-key anchor type. https-jwks resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.

validation_statestring

You receive the trust-anchor validation state: unverified, verified, or failed.

last_validated_atstring date-time nullable

You receive the timestamp of the most recent validation run, or null when the issuer has never been validated.

Example response

[
  {
    "added_by": "TenantPrincipal<docs-capture-z2373a:owner>",
    "created_at": "2026-07-02T23:51:58.727290+00:00",
    "framework": "acme-partner-framework-y4bf",
    "id": "ef799a56-23dc-467d-9760-9fd20a8457fa",
    "iss": "http://localhost:8011/v1/issuers/docs-external-issuer-b2u6ty",
    "name": "Gov PID Issuer",
    "status": "active",
    "trust_anchor": "https-jwks",
    "validation_state": "unverified"
  }
]