Register workload encryption key

POST

/v1/identity/agent/encryption-key

curl --request POST \
  --url http://localhost:8693/v1/identity/agent/encryption-key \
  --header 'Content-Type: application/json' \
  --data '{ "workload_id": "example", "key": {} }'

• Plaintext (dev mode)
• mTLS (production)

Register a JWK public key for a workload. Used by ADR-0014 converged credential management to encrypt secrets into the WIMSE JWT.

Request Body ^required

Media type application/json

object

workload_id

required

WIMSE workload URI

string

key

required

JWK public key (RSA or ECDSA)

object

Example ^generated

{
  "workload_id": "example",
  "key": {}
}

Responses

201

Key registered

400

Invalid key format

Media type application/json

object

error

required

Error code (RFC 8693 compatible)

string

Allowed values: invalid_request unsupported_grant_type access_denied server_error not_implemented not_found method_not_allowed

error_description

Human-readable error detail

string

Example

{
  "error": "invalid_request"
}