Skip to main content
POST
Set signing policy
Sets or updates the signing policy for a receipt type. The policy controls which issuers can mint receipts and which signing algorithms are permitted. If no policy is configured, all trusted issuers with any algorithm are permitted. To read the current policy, use GET /v1/receipt-types/{name}/signing-policy.

Path parameters

string
required
Receipt type name, optionally versioned: payment_receipt or payment_receipt@1.0.0.

Request

boolean
required
If true, any trusted issuer meeting the min_trust_tier may mint receipts of this type.
string[]
UUIDs of explicitly permitted issuers. Used when allow_any_issuer is false.
string
Minimum trust tier: any, self_issued, verified_org, or regulated_issuer. Defaults to any.
string[]
Allowed signing algorithms (e.g. ["Ed25519"]). Empty array means all algorithms are permitted.

Response

string
The receipt type name.
boolean
Whether any trusted issuer can mint.
array
Whitelisted issuer UUIDs.
string
Minimum trust tier required.
array
Permitted signing algorithms.
string
ISO 8601 timestamp of last update.

Authorizations

X-API-Key
string
header
required

API key for machine-to-machine authentication

Path Parameters

name
string
required

Receipt type name

Body

application/json
allowed_algorithms
string[]
required

List of allowed signing algorithms

require_hsm
boolean

Require HSM-backed keys

Response

Signing policy updated

name
string
signing_policy
object