Skip to main content
POST
Register a signer

Authorizations

Authorization
string
header
required

API key starting with zt_live_ (production) or zt_test_ (sandbox). Get your key at https://developers.zebratruth.ai

Headers

Idempotency-Key
string<uuid>
required

Unique request identifier to prevent duplicate execution and double-charging. Generate a new UUID for each distinct request. Reuse the same key to safely retry.

X-Recent-Auth-Proof
string
required

Body

application/json
displayName
string
required
Required string length: 1 - 120
Required string length: 1 - 200
algorithm
enum<string>
required
Available options:
es256,
es384,
es512,
ps256,
ps384,
ps512,
ed25519
endpointUrl
string<uri>
required

Your signing endpoint. It is challenged during registration and called for every signature; requests to it are signed with the keys from GET /media/provenance/signing-keys.

certificateChainPem
string
required

Public certificate chain, leaf first, PEM. Up to 512 KB. Must terminate at an accepted trust anchor.

certificateId
string
Maximum string length: 200

Response

Signer registered and active

signer
object

A registered signer. The certificate chain itself is never returned.

trustAnchor
object