Skip to main content

​
Get Signing Policy

​
name
string
required
Receipt type name, optionally versioned: payment_receipt or payment_receipt@1.0.0
GET /v1/receipt-types/{name}/signing-policy Returns the signing policy for a receipt type. If no policy is configured, all trusted issuers with any algorithm are permitted.

​
Set Signing Policy

POST /v1/receipt-types/{name}/signing-policy

​
Fields

FieldTypeDescription
allow_any_issuerbooleanIf true, any trusted issuer may mint
allowed_issuer_idsstring[]UUIDs of explicitly permitted issuers (used when allow_any_issuer is false)
min_trust_tierstringMinimum trust tier: any | self_issued | verified_org | regulated_issuer
allowed_algsstring[]Allowed signing algorithms (e.g. ["Ed25519"]). Empty = all allowed

​
Example: Restrict to verified organizations using Ed25519

{
  "allow_any_issuer": true,
  "min_trust_tier": "verified_org",
  "allowed_algs": ["Ed25519"]
}

​
Example: Whitelist specific issuers

{
  "allow_any_issuer": false,
  "allowed_issuer_ids": ["issuer-uuid-1", "issuer-uuid-2"],
  "min_trust_tier": "any",
  "allowed_algs": []
}