Add trust source
Adds a trust source to the organisation: CA certificates that you give (`trust_anchor`), or a published list that the wallet downloads (`etsi_trusted_list`, `etsi_lote`). Each trust source has one `usedFor` role, and a check reads only the trust sources of its accepted list.
List trust sources
Lists the trust sources of the organisation, newest first, with the state of each list. Filter with `kind`, `role` and `nameContains`. For the next page, send the `nextCursor` of the answer as `cursor`. A filter value that is not a kind or a role matches nothing.
Read trust source
Returns one trust source of the organisation, with its certificates and the state of its list (`list`). Get the ID from [List trust sources](/docs/openid4vc-api/config-list-digital-wallet-open-id-trust-source).
Update trust source
Changes one trust source of the organisation. The change is partial: a member that you leave out keeps its stored value.
Delete trust source
Deletes one trust source of the organisation. A source in use cannot be deleted: an accepted list names it, or a stored DCQL query has its URL as an `etsi_tl` value. The answer is then `400` (`trust_source.in_use`). [Read trust source usage](/docs/openid4vc-api/config-read-digital-wallet-open-id-trust-source-usage) tells where it is used. Remove the source from these settings first.
Read trust source usage
Reports where a trust source is used: the credential definitions, the presentation definitions and the holder configuration that name it, also through the `etsi_tl` URL of a stored query. A source in use cannot be deleted or turned off, and it cannot change its `url` or its `usedFor` (`trust_source.in_use`).
Refresh trust source
Downloads the list of a list trust source now (**Refresh now** in the dashboard), in the request, and answers the new state of the list. A failed download keeps the last good copy and sets `list.lastError`. The wallet also downloads each list on its own schedule: at the next update of the list, and at least once each 24 hours.
Read trust source entry
Returns one whole entry of a trust source, from the stored copy of the source: the provider and the service as the list gives them, the details of the listed certificate, the former states of the service, and whether the trust checks use the entry (`usable`, with `reason` when they do not). The API does not download the list for this read. The entry of a source that the checks do not use, for example a turned-off source, is returned too.
List trust source entries
Lists the trust source entries of the organisation with their roles: the providers and services of the lists, and the CA certificates of the trust anchors. Use it to see which providers a trust source gives before you name the trust source in an accepted list (by its `sourceId`), or to find a value for the DCQL `trusted_authorities` of a credential query (`certificate.aki` for `aki`, `sourceUrl` for `etsi_tl`).