Sign in

v8

latestOpenAPI 3.1.0raw.githubusercontent.com2026-07-05730512.7 KB
Trust Registry

Update a trusted issuer

Update a trusted issuer's metadata (name, trust_anchor, jwks_uri, did, framework) or its status (active / disabled). The iss is immutable — attempting to change it returns 400; delete and recreate the issuer instead. Editing any metadata field resets validation_state to unverified. A disabled issuer stays in the registry but fails the verification trust gate.

patch/v1/trusted-issuers/{uuid}

Path parameters

uuidstring uuid required

UUID of the trusted issuer registry entry to update.

Request body

namestring

You optionally set the trusted issuer display name.

trust_anchorstring

You optionally set the signing-key anchor type: https-jwks, did-web, or x509.

jwks_uristring uri

You optionally set the JSON Web Key Set (JWKS) endpoint.

didstring

You optionally set the decentralized identifier (DID) for the issuer.

frameworkstring nullable

You optionally set (or clear with null) the trust framework slug this issuer belongs to.

statusstring

You optionally set the trust-gate status: active or disabled.

Example request

{
  "name": "Gov PID Issuer",
  "trust_anchor": "https-jwks",
  "jwks_uri": "https://issuer.gov.example/.well-known/jwks.json",
  "framework": "acme-partner-framework-ypr5",
  "status": "disabled"
}

Response

The trusted issuer status was updated.

idstring uuid

You receive the UUID for the trusted issuer registry entry.

namestring

You receive the trusted issuer display name.

issstring uri

You receive the issuer identifier that credentials must match.

trust_anchorstring

You receive the signing-key anchor type. https-jwks resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.

jwks_uristring

You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.

didstring

You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.

statusstring

You receive the updated trust-gate status for this issuer.

added_bystring

You receive the principal that registered this trusted issuer.

frameworkstring nullable

You receive the associated framework slug, or null when the issuer is not tied to one.

created_atstring date-time

You receive the timestamp when this trusted issuer was registered.

validation_statestring

You receive the trust-anchor validation state: unverified, verified, or failed.

last_validated_atstring date-time nullable

You receive the timestamp of the most recent validation run, or null when the issuer has never been validated.

Example response

{
  "id": "18d3239a-4a0e-412b-9487-17ce7dc3bb8e",
  "name": "Gov PID Issuer",
  "iss": "http://localhost:8011/v1/issuers/docs-external-issuer-9r79lx",
  "trust_anchor": "https-jwks",
  "status": "disabled",
  "added_by": "TenantPrincipal<docs-capture-6clew6:owner>",
  "framework": "acme-partner-framework-ypr5",
  "created_at": "2026-07-02T23:33:35.153496+00:00",
  "validation_state": "unverified"
}