Skip to main content
PUT
Register your own token issuer

Authorizations

Authorization
string
header
required

Use Authorization: Bearer end_sk_* for partner API keys (e.g. end_sk_AbCd_example_api_key).

Body

application/json
issuer
string
required

The iss your identity tokens carry. Matched exactly, so it must be stable across key rotation.

Required string length: 1 - 2048
Example:

"https://auth.brand.example"

jwks_url
string<uri>
required

A public, cacheable JWKS URL Endstate fetches to verify your tokens. HTTPS only.

Maximum string length: 2048
Example:

"https://auth.brand.example/.well-known/jwks.json"

audience
string
required

The aud your identity tokens carry. Use a value dedicated to Endstate so your other tokens cannot be presented here.

Required string length: 1 - 2048
Example:

"https://wallet.brand.example"

Response

The registered configuration.

auth_type
enum<string>
required

external when your own token issuer is registered; endstate when identity is managed by Endstate.

Available options:
endstate,
external
Example:

"external"

issuer
string | null
required

The registered token issuer (iss), or null when unset.

Example:

"https://auth.brand.example"

jwks_url
string | null
required

The registered JWKS URL, or null when unset.

Example:

"https://auth.brand.example/.well-known/jwks.json"

audience
string | null
required

The audience (aud) your identity tokens carry, or null when unset.

Example:

"https://wallet.brand.example"