Sign in
latestOpenAPI 3.0.32026-08-19400919.9 MB

6b6e0450635c

kms

Create an issuer

Create a new KMS issuer for the authenticated team. An issuer owns the asymmetric signing keys that are used to sign tokens and messages.

post/v1/kms/issuers

Query parameters

teamIdstring
Example:team_1a2b3c4d5e6f7g8h9i0j1k2l

The Team identifier to perform the request on behalf of.

slugstring
Example:my-team-url-slug

The Team slug to perform the request on behalf of.

Request body

namestring required

The name of the issuer.

algorithm'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512' | 'ES256' | 'ES384' | 'ES512' | 'EdDSA'

The signing algorithm to use for the issuer.

claimsSchemaobject

A JSON Schema used to validate the resolved token claims when signing tokens for this issuer.

importKeystring

The PEM-encoded private key to use for the issuer.

importKeyIdstring

The key id to use as the imported key's JWT/JWKS kid. Only allowed when importKey is provided. Not required to be unique; the addressable key id is the server-minted keyId returned in the response.

Response

idstring required
ownerIdstring required
namestring required
algorithm'ES256' | 'ES384' | 'ES512' | 'EdDSA' | 'PS256' | 'PS384' | 'PS512' | 'RS256' | 'RS384' | 'RS512' required
origin'external' | 'vercel' required
managedBystring
claimsSchemaobject
createdAtstring required
updatedAtstring required