> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zebratruth.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get the keys ZebraTruth signs endpoint requests with

> Public, unauthenticated. Returns the Ed25519 public keys and the verification recipe
your signing endpoint must apply to every request from ZebraTruth before signing.
Fetch this before registering a signer.




## OpenAPI

````yaml /openapi/zebratruth-v1.yaml get /media/provenance/signing-keys
openapi: 3.1.0
info:
  title: ZebraTruth Compliance API
  version: 1.0.0
  description: >
    AI-powered compliance checking for advertising content. Check text and
    images against

    jurisdiction laws, platform policies, and rights clearance requirements.
    Results include

    embeddable annotations mapped to content locations (text spans, video
    timestamps, image regions).
  contact:
    name: ZebraTruth Support
    email: support@zebratruth.ai
    url: https://developers.zebratruth.ai
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
servers:
  - url: https://api.zebratruth.ai/v1
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Video Compliance
    description: >
      **Primary endpoint.** Async compliance analysis for video ads. 3-step
      flow:

      get an upload URL, upload the video bytes, submit for analysis. Poll or

      receive an HMAC-signed webhook with the report. Returns timestamped

      findings citing stable evidence IDs (`audio_NNN`, `frame_NNN`, `ocr_NNN`,

      `signal_NNN`). 3-180 second videos. mp4 / webm /

      quicktime. Built for ad agencies and creators.
  - name: Authentication
    description: Validate API keys and check account status
  - name: Compliance
    description: >-
      Run compliance checks on text + image content (sync). For video, use the
      Video Compliance endpoints above.
  - name: Agents
    description: Discover and invoke individual compliance agents
  - name: Jobs
    description: Poll async job status and view execution traces
  - name: Reports
    description: Retrieve and replay compliance reports
  - name: Observability
    description: Request logs and webhook delivery status
  - name: Billing
    description: Subscriptions, plan changes, and credit balance
  - name: Documents
    description: Extract text from PDF and Word documents before or as part of a check
  - name: Check History
    description: List and retrieve past compliance checks for the workspace
  - name: Provenance
    description: Inspect and sign Content Credentials (C2PA) on images and video
  - name: Corpus
    description: >-
      Review queue for proposed changes to the governed legal corpus (dashboard
      session)
  - name: Webhooks
    description: Saved webhook endpoints (dashboard session) and delivery logs
paths:
  /media/provenance/signing-keys:
    get:
      tags:
        - Provenance
      summary: Get the keys ZebraTruth signs endpoint requests with
      description: >
        Public, unauthenticated. Returns the Ed25519 public keys and the
        verification recipe

        your signing endpoint must apply to every request from ZebraTruth before
        signing.

        Fetch this before registering a signer.
      operationId: getProvenanceSigningKeys
      responses:
        '200':
          description: Signing keys and verification steps
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProvenanceSigningKeysResponse'
        '503':
          description: '`data.code`: `signing_key_unavailable`.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CodedError'
      security: []
components:
  schemas:
    ProvenanceSigningKeysResponse:
      type: object
      properties:
        keys:
          type: array
          items:
            type: object
            properties:
              keyId:
                type: string
              algorithm:
                type: string
                enum:
                  - ed25519
              publicKeyPem:
                type: string
        verification:
          type: object
          description: >-
            How to verify the signature ZebraTruth puts on every request to your
            signing endpoint.
          properties:
            signatureVersion:
              type: string
              enum:
                - v1
            payloadTemplate:
              type: string
              example: '{timestamp}.{signerId}.{body}'
            headers:
              type: object
              properties:
                signature:
                  type: string
                  example: x-zebratruth-signature
                timestamp:
                  type: string
                  example: x-zebratruth-timestamp
                signerId:
                  type: string
                  example: x-zebratruth-signer-id
                keyId:
                  type: string
                  example: x-zebratruth-key-id
            steps:
              type: array
              items:
                type: string
    CodedError:
      type: object
      description: >
        Standard error envelope. `data.code` is the stable discriminator to
        branch on;

        `statusMessage` is the human-readable reason. Unless a response
        documents extra

        named fields, `data` is reduced to `{ code }` before it is sent.
      required:
        - statusCode
        - message
      properties:
        error:
          type: boolean
          example: true
        url:
          type: string
          format: uri
        statusCode:
          type: integer
        statusMessage:
          type: string
        message:
          type: string
        data:
          type: object
          required:
            - code
          properties:
            code:
              type: string
              example: review_scope_not_enabled
          additionalProperties: true
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: |
        API key starting with `zt_live_` (production) or `zt_test_` (sandbox).
        Get your key at https://developers.zebratruth.ai

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.