Trust Sources

Refresh trust source

POST/v4/config/ows/trust/sources/{trustSourceId}/refresh

Downloads the list of a list trust source now (Refresh now in the dashboard), in the request, and answers the new state of the list. A failed download keeps the last good copy and sets list.lastError. The wallet also downloads each list on its own schedule: at the next update of the list, and at least once each 24 hours.

A refresh less than 5 minutes after the last download of the list URL is refused with HTTP 429 and a Retry-After header. A trust anchor has no list to download. API key scope: trust-sources:update (the older trust-anchors:update still works for a period).

Language of the request sample

curl -X POST 'https://demo-api.igrant.io/v4/config/ows/trust/sources/6d2c0b8e-3f4a-4c1d-9e2b-7a5f1c3d8e90/refresh' \
  -H 'Authorization: ApiKey <your-api-key>'

{
  "trustSource": {
    "id": "c7fba617-0fa4-4817-9c97-b74932ff08c1",
    "kind": "etsi_trusted_list",
    "name": "WE BUILD NXD QEAA trusted list",
    "usedFor": "qeaa_provider",
    "enabled": true,
    "url": "https://trustlist.nxd.foundation/trust-lists/NXD-TL-QEAA.xml",
    "certificates": [],
    "signerCertificates": [
      {
        "subject": "O=NXD Foundation,C=SE",
        "issuer": "O=NXD Foundation,C=SE",
        "serialNumber": "690874031736977368252587783617202191683118010803",
        "notValidBefore": "2026-09-21T09:48:39Z",
        "notValidAfter": "2029-09-20T09:53:39Z",
        "ski": "FcMN-8IW8DdwzIpRfKUgLUEYCLE",
        "sha256Fingerprint": "4932ceed8a3d755c46003268d986fefd29960bcb1441559c72545c9ad54b1579"
      }
    ],
    "list": {
      "listType": "http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUgeneric",
      "sequenceNumber": 218,
      "issuedAt": "2026-11-06T18:58:51Z",
      "nextUpdate": "2027-05-06T18:58:51Z",
      "state": "current",
      "signatureVerified": true,
      "entryCount": 2,
      "lastFetchedAt": "2026-11-10T00:30:45Z",
      "lastChangedAt": "2026-11-09T00:28:53Z",
      "nextRefreshAt": "2026-11-11T00:30:45Z",
      "usedUntil": "2027-05-09T18:58:51Z",
      "lastError": null
    },
    "createdAt": "2026-11-09T00:28:53Z",
    "updatedAt": "2026-11-10T00:30:46Z"
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:trust-sources:update

Path parameters

trustSourceIdstring<uuid>required
The id of a trust source of the organisation, from List trust sources. A value that is not a UUID gives HTTP 404, as an unknown ID.
Example:"6d2c0b8e-3f4a-4c1d-9e2b-7a5f1c3d8e90"

Response

application/json

The trust source with the new state of its list.

trustSourceobject
A trust source of the organisation (or of the sandbox organisation): CA certificates that the organisation gives (a trust anchor) or a published list that the wallet downloads. A trusted list check of the issuer, the verifier or the holder reads only the trust sources in the accepted list of its setting.