XXC PUBLIC KEY EXCHANGE

Find a public key.

Discover OpenPGP identities published by this workspace. Download keys for email, software, and signature verification.

Loading public keys…

Infrastructure trust and identity

The Trust Center connects endpoint observations, certificate deployment agents, policy approvals, workload identities, signed release evidence, offline and hardware authorities, recovery plans, audit checkpoints, and post-quantum assessments.

Trust operations API

Use workspace-bound bearer tokens with trust.read, trust.manage, and operation-specific permissions. Browser requests use the selected workspace and CSRF protection.

GET /api/v1/trust/map
GET /api/v1/trust/deployments
POST /api/v1/trust/requests
POST /api/v1/trust/releases

Sign in with XXC Trust

Register an application in Single sign-on. Use authorization codes, exact HTTPS callbacks, PKCE S256, and explicit user consent. Passkeys are available in Account.

OpenID Connect discovery →

Workload federation

Exchange a pinned OIDC assertion or SPIRE JWT-SVID plus a CSR for a short-lived SPIFFE identity. Workloads retain their private keys.

POST /api/v1/workload-enroll

Complete API specification →