Skip to main content
Truthlocks provides public endpoints for resolving issuer identities using W3C Decentralized Identifiers (DIDs) and retrieving signing keys via JSON Web Key Sets (JWKS). These endpoints enable standards-based key verification without proprietary integrations.

DID resolution

Every issuer has a DID in the format did:truthlock:{issuer_id} that resolves to a W3C DID Document containing their public key material and service endpoints. DIDs are automatically assigned when an issuer is created.

Endpoint

No authentication required. Responses are cached for 1 hour.

Example request

Example response

The response uses Content-Type: application/did+json.

Verification method types

The key type in the DID Document depends on the issuer’s signing algorithm:

JWKS endpoint

Retrieve all active public keys for an issuer as a standard JSON Web Key Set.

Endpoint

No authentication required. Responses are cached for 1 hour.

Example request

Example response

When to use each endpoint

Using DIDs in proof bundles

The issuer_certificate.issuer_did field in a proof bundle contains the issuer’s DID. You can resolve it to retrieve the public key and independently verify the attestation signature without relying on Truthlocks infrastructure.