---
title: "List trusted issuers"
method: GET
path: "/v1/trusted-issuers"
tags: ["Trust Registry"]
---

# List trusted issuers

`GET /v1/trusted-issuers`

List the issuers this tenant trusts when verifying presented credentials. Didit ID rejects credentials whose `iss` value does not match an active trusted issuer. The response is a bare JSON array ordered by most recent creation time.

## Response `200`

A bare JSON array of trusted issuer objects for the caller's tenant.

- object[]
  - `added_by` string — You receive the principal that registered this trusted issuer.
  - `created_at` string, date-time — You receive the timestamp when this trusted issuer was registered.
  - `did` string — You receive the decentralized identifier for the issuer. The captured value is an empty string when the registry entry does not store one.
  - `framework` string — You receive the associated framework slug, or null when the issuer is not tied to one.
  - `id` string, uuid — You receive the UUID for this trusted issuer registry entry.
  - `iss` string, uri — You receive the issuer identifier that credentials must match.
  - `jwks_uri` string — You receive the JSON Web Key Set (JWKS) endpoint. The captured value is an empty string when the registry entry does not store one.
  - `name` string — You receive the trusted issuer display name.
  - `status` string — You receive the trust-gate status for this issuer.
  - `trust_anchor` string — You receive the signing-key anchor type. `https-jwks` resolves through a JSON Web Key Set (JWKS) endpoint when one is configured.
  - `validation_state` string — You receive the trust-anchor validation state: `unverified`, `verified`, or `failed`.
  - `last_validated_at` string, date-time, nullable — You receive the timestamp of the most recent validation run, or null when the issuer has never been validated.

---

[API](https://skmtc.net/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.net/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/versions/e4eddba66557/schema)