# Sigstore Public Good APIs

**Canonical:** https://apis.io/apis/openssf/sigstore-api/  
**Provider:** OpenSSF — https://apis.io/providers/openssf/  
**Base URL:** https://rekor.sigstore.dev  
**Documentation:** https://www.sigstore.dev/

Sigstore Public Good APIs is one of 7 APIs that [OpenSSF](https://apis.io/providers/openssf/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Signing, Transparency Log, and Supply Chain. The published artifact set on APIs.io includes API documentation.

Sigstore is an OpenSSF-hosted standard and service for signing, verifying, and protecting software. The public-good Sigstore instance exposes Fulcio (code-signing certificate authority) and Rekor (transparency log) APIs that can be queried programmatically to inspect signing certificates and transparency log entries.

## Machine-readable artifacts (4)

- **Documentation** — https://docs.sigstore.dev/
- **Documentation** — https://docs.sigstore.dev/logging/overview/
- **GitHubOrganization** — https://github.com/sigstore
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/openssf/refs/heads/main/apis.yml

## Other OpenSSF APIs (6)

- [GUAC (Graph for Understanding Artifact Composition)](https://apis.io/apis/openssf/guac-api/)
- [OpenSSF Projects API](https://apis.io/apis/openssf/openssf-projects-api/)
- [OpenSSF Query API](https://apis.io/apis/openssf/openssf-query-api/)
- [OpenSSF Querybatch API](https://apis.io/apis/openssf/openssf-querybatch-api/)
- [OpenSSF V1experimental API](https://apis.io/apis/openssf/openssf-v1experimental-api/)
- [OpenSSF Vulns API](https://apis.io/apis/openssf/openssf-vulns-api/)

## Tags

Signing, Transparency Log, Supply Chain

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/openssf/sigstore-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/openssf/.