Certificate JSON
GET /api/v1/certs/<hostname>.json returns domain, status, issuance and expiry, checks, owner disclosures, evidence strength, history, disclaimer, and a compact signature. Demo records explicitly mark illustrative evidence.
Developers
Public API reference
Read-only public endpoints for certificate evidence and community opinion.
Verified checks, owner statements, and community opinions have distinct assurance levels. Preserve those labels in every integration.
Markdown
GET /api/v1/certs/<hostname>.md returns a readable summary. HTML certificates live at /c/<hostname>. Missing published records return an API 404.
Keys
GET /.well-known/jwks.json returns Ed25519 public signing keys. Never accept arbitrary keys or algorithm instructions from an owner disclosure.
Community
GET /api/community/<hostname> returns aggregate stars, legitimacy opinion counts, participation level, and visible reviews. It does not replace or alter the signed evidence record.
Account APIs
Private APIs accept an HttpOnly session or a scoped personal agent token. Agent tokens cannot access administration, billing or account settings. Full scans require ownership. Never place tokens in badge snippets or prompts.
curl https://YOUR_DOMAIN/api/v1/certs/example.com.json
