Skip to main content
Trust Sources

List trust source entries

GET/v4/config/ows/trust/entries

Lists the trust source entries of the organisation with their roles: the providers and services of the lists, and the CA certificates of the trust anchors. Use it to see which providers a trust source gives before you name the trust source in an accepted list (by its sourceId), or to find a value for the DCQL trusted_authorities of a credential query (certificate.aki for aki, sourceUrl for etsi_tl).

Without sourceId, the page has the entries of the trust sources that the checks use: enabled, and with a good copy, also an expired one. With sourceId, it has the entries of the copy of that source whatever its state, and source tells whether the checks use them. For the next page, send the nextCursor of the answer as cursor. To see the whole entry (the provider, the service, the certificate details and the former states), use Read trust source entry with the sourceId and entryId of an item.

API key scope: trust-sources:read (the older trust-anchors:read still works for a period).

Authorizations

  • Authorizationstringheaderrequired

    Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.

    Scope:trust-sources:read

Query parameters

  • limitinteger

    The most items in the page: 1 to 100, default 20. Another value gives HTTP 400.

    From 1 to 100.

    Default:20

  • cursorstring

    The nextCursor of the page before, to read the next page. Leave it out for the first page. Use it as it is: a changed cursor gives HTTP 400. Do not send it with offset (HTTP 400).

  • offsetinteger

    How many items come before the page: 0 to 10000. Use it only to jump to a page of a pager, then continue with the nextCursor of the answer. Do not send it with cursor (HTTP 400). Another value gives HTTP 400.

    From 0 to 10000.

  • includeTotalboolean

    true: the answer also has total and totalCapped, the number of items of the filtered list. Send it on the first page only, for a pager. Default false. Another value gives HTTP 400.

    Default:false

  • rolestring

    Only the entries with one of these roles: one role, a comma-separated list of roles (pid_provider,qeaa_provider), or issuer for every issuer role (pid_provider, qeaa_provider, pub_eaa_provider, eaa_provider, mdl_issuer). A value that is not a role is left out. Each item shows only the roles that match.

    Example:"wallet_provider"

  • sourceIdstring<uuid>

    Only the entries of this trust source (its id), whatever the state of its copy. An unknown ID gives an empty page and source null.

  • textContainsstring

    Only the entries with this text, in any letter case, in the provider name, the service name, the certificate subject or certificate.aki.

  • statusstring

    Only the entries with this status, or with one of a comma-separated list, for example granted or granted,withdrawn.

    Example:"granted"

Response

application/json

One page of trust source entries.

  • itemsobject[]

    The entries of the page. Empty when none matches.

  • nextCursorstring | null

    Send it as cursor for the next page. null on the last page.

  • sourceobject | null

    With sourceId: the trust source and whether the checks use its entries. null without sourceId, or for an unknown ID.

  • totalinteger

    The number of items of the filtered list, at most 10000. Only with includeTotal=true. When the list has more items, the value is 10000 and totalCapped is true.

    From 0 to 10000.

    Example:137

  • totalCappedboolean

    true when the filtered list has more than 10000 items: total then shows 10000. Only with includeTotal=true.

    Example:false