Tradeverifyd SCITT Reference APIs API
SCRAPI related http resources
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/tradeverifyd-scitt-reference-apis-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: SCITT Transparency Service SCITT Reference APIs API
description: 'Secure statements regarding supply chain artifacts in an append only transparency log.
Obtain offline verifiable proof that an artifact was recorded in the log.
Query the log for statements about artifacts to build verifiable value chains.
'
version: 1.0.0
contact:
name: Tradeverifyd
url: https://github.com/tradeverifyd/transparency-service
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0.html
servers:
- url: http://127.0.0.1:56177
description: Local
tags:
- name: SCITT Reference APIs
description: SCRAPI related http resources
paths:
/.well-known/scitt-configuration:
get:
summary: Service Configuration
description: 'Get the SCITT service configuration including supported algorithms,
registration policies, and service metadata (per SCRAPI specification).
'
tags:
- SCITT Reference APIs
responses:
'200':
description: Service configuration
content:
application/json:
schema:
type: object
properties:
issuer:
type: string
description: Service issuer URL
example: https://transparency.example
supported_algorithms:
type: array
items:
type: string
description: Supported signing algorithms
example:
- ES256
supported_hash_algorithms:
type: array
items:
type: string
description: Supported hash algorithms
example:
- SHA-256
registration_policy:
type: object
properties:
type:
type: string
description: Registration policy type
example: open
tile_height:
type: integer
description: 'Height of tiles in the Merkle tree. A tile represents the entire subtree
of this height with its hashes as the leaves. The Merkle Tree levels between
those expressed by the tile hashes are reconstructed by hashing the leaves.
'
example: 8
example:
issuer: http://127.0.0.1:56177
registration_policy:
type: open
supported_algorithms:
- ES256
supported_hash_algorithms:
- SHA-256
tile_height: 8
/.well-known/scitt-keys:
get:
summary: Service Verification Keys
description: 'Get the service''s verification keys as a COSE Key Set in CBOR format
(per SCRAPI specification and RFC 9052 Section 7).
'
tags:
- SCITT Reference APIs
responses:
'200':
description: COSE Key Set
content:
application/cbor:
schema:
type: string
format: binary
description: 'CBOR-encoded array of COSE_Key structures.
Each key includes the COSE key thumbprint (RFC 9679) as the key ID.
'
'500':
description: Failed to generate key set
content:
text/plain:
schema:
type: string
/entries:
post:
summary: Register Statement
description: 'Register a new COSE Sign1 statement in the transparency log.
The statement will be assigned an entry ID and included in the Merkle tree.
Supports both application/cose and application/scitt-statement+cose content types.
'
tags:
- SCITT Reference APIs
security:
- bearerAuth: []
requestBody:
required: true
content:
application/cose:
schema:
type: string
format: binary
description: CBOR-encoded COSE Sign1 structure
application/scitt-statement+cose:
schema:
type: string
format: binary
description: CBOR-encoded COSE Sign1 SCITT statement
responses:
'201':
description: Statement registered successfully - returns COSE Sign1 receipt
content:
application/scitt-receipt+cose:
schema:
type: string
format: binary
description: CBOR-encoded COSE Sign1 receipt with Merkle inclusion proof
'400':
description: Invalid request (malformed COSE Sign1 or validation failure)
content:
text/plain:
schema:
type: string
'401':
description: Unauthorized (missing or invalid API key)
content:
text/plain:
schema:
type: string
'415':
description: Unsupported Media Type
content:
text/plain:
schema:
type: string
/entries/{entry_id}:
get:
summary: Get Receipt
description: 'Retrieve a transparency receipt for a registered statement.
The receipt contains a Merkle inclusion proof and signed checkpoint.
'
tags:
- SCITT Reference APIs
parameters:
- name: entry_id
in: path
required: true
description: Entry ID of the registered statement
schema:
type: integer
format: int64
example: 42
responses:
'200':
description: Receipt retrieved successfully
content:
application/scitt-receipt+cose:
schema:
type: string
format: binary
description: CBOR-encoded COSE Sign1 receipt with Merkle inclusion proof
'404':
description: Statement not found
content:
text/plain:
schema:
type: string
'400':
description: Invalid entry ID format
content:
text/plain:
schema:
type: string
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: API key authentication using Bearer token