Trust Sources

Read trust source

GET/v4/config/ows/trust/sources/{trustSourceId}

Returns one trust source of the organisation, with its certificates and the state of its list (list). Get the ID from List trust sources.

API key scope: trust-sources:read (the older trust-anchors:read still works for a period).

Read trust source

Language of the request sample

curl 'https://demo-api.igrant.io/v4/config/ows/trust/sources/6d2c0b8e-3f4a-4c1d-9e2b-7a5f1c3d8e90' \
  -H 'Authorization: ApiKey <your-api-key>'

{
  "trustSource": {
    "id": "929bb7d1-f654-4f10-bb57-8eb42cc2d969",
    "kind": "trust_anchor",
    "name": "Test provider root CA",
    "usedFor": "wallet_provider",
    "enabled": true,
    "url": null,
    "certificates": [
      {
        "subject": "CN=Example Bank AB Test Provider CA (NOT FOR PRODUCTION),O=Example Bank AB,C=SE",
        "issuer": "CN=Example Bank AB Test Provider CA (NOT FOR PRODUCTION),O=Example Bank AB,C=SE",
        "serialNumber": "108477698159149186209338756128210766651",
        "notValidBefore": "2026-10-29T03:36:35Z",
        "notValidAfter": "2035-10-29T03:36:35Z",
        "ski": "6z-7WgOEQkaGn4SlF_msn_qFfRM",
        "sha256Fingerprint": "466682264cc16550fbd13ac7a30d21def374e1d2603a0cea2507ddc9e86ac8b2"
      }
    ],
    "signerCertificates": [],
    "list": null,
    "createdAt": "2026-11-08T14:46:45Z",
    "updatedAt": "2026-11-08T14:46:45Z"
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:trust-sources:read

Path parameters

trustSourceIdstring<uuid>required
The id of a trust source of the organisation, from List trust sources. A value that is not a UUID gives HTTP 404, as an unknown ID.
Example:"6d2c0b8e-3f4a-4c1d-9e2b-7a5f1c3d8e90"

Response

application/json

The trust source.

trustSourceobject
A trust source of the organisation (or of the sandbox organisation): CA certificates that the organisation gives (a trust anchor) or a published list that the wallet downloads. A trusted list check of the issuer, the verifier or the holder reads only the trust sources in the accepted list of its setting.