# TUF Repository Specification

**Canonical:** https://apis.io/apis/tuf/tuf-spec/  
**Provider:** The Update Framework (TUF) — https://apis.io/providers/tuf/  
**Documentation:** https://theupdateframework.github.io/specification/latest/

TUF Repository Specification is one of 7 APIs that [The Update Framework (TUF)](https://apis.io/providers/tuf/) publishes on the [APIs.io](https://apis.io/) network. This API exposes 4 JSON Schema definitions. Tagged areas include Metadata, Repository Metadata, Specification, and Verification. The published artifact set on APIs.io includes API documentation, a GitHub repository, and 4 JSON Schemas.

The TUF specification defines the structure of update repositories including the root, targets, snapshot, and timestamp metadata files. Each metadata file has a defined schema with signatures, expiration dates, and delegation rules. Clients follow a defined verification workflow to securely resolve and download updates while protecting against various attack vectors including key compromise, rollback attacks, freeze attacks, and mix-and-match attacks. The specification is version 1.0.31.

## Machine-readable artifacts (7)

- **Documentation** — https://theupdateframework.github.io/specification/latest/
- **GitHubRepository** — https://github.com/theupdateframework/specification
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/tuf/refs/heads/main/json-schema/tuf-root-metadata-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/tuf/refs/heads/main/json-schema/tuf-targets-metadata-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/tuf/refs/heads/main/json-schema/tuf-snapshot-metadata-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/tuf/refs/heads/main/json-schema/tuf-timestamp-metadata-schema.json
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/tuf/refs/heads/main/apis.yml

## Other The Update Framework (TUF) APIs (6)

- [TUF Python Reference Implementation](https://apis.io/apis/tuf/python-tuf/)
- [TUF Go Implementation](https://apis.io/apis/tuf/go-tuf/)
- [TUF Rust Implementation](https://apis.io/apis/tuf/rust-tuf/)
- [TUF JavaScript Implementation](https://apis.io/apis/tuf/tuf-js/)
- [TUF on CI](https://apis.io/apis/tuf/tuf-on-ci/)
- [TUF Conformance Test Suite](https://apis.io/apis/tuf/tuf-conformance/)

## Tags

Metadata, Repository Metadata, Specification, Verification

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/tuf/tuf-spec/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/tuf/.