API ReferenceKeys

Rotate issuer key

Retire the active issuer key and create a new one (audited)

Authorization

admin

AuthorizationBearer <token>

AGENTGUARD_ADMIN_TOKEN (owner/operator)

In: header

curl -X POST "https://example.com/v1/keys/rotate"

{}

Get issuer key set GET

Issuer key set: every key with kid, status, created_at, retired_at, compromised_at. Pin this.

Mark key compromised POST

Mark a key compromised as of `at` (rotates first if active)