--- layout: default ---

x-jws-signature

de facto — unregistered response reached by regulation 2 spellings

Declared by 35 providers across 4881 published specification files in the APIs.io network.

What this header is for, and how to use it →

A count here is providers whose published contract declares this header — not providers who send it. Response headers set at the edge rarely appear in an OpenAPI at all, so a low number can measure documentation practice rather than deployment.

Spelled 2 ways

HTTP field names are case-insensitive (RFC 9110 §5.1), so every spelling below is the same header on the wire. A contract is not the wire: generated clients key off the string, and a developer reading two of these sees two different headers.

x-jws-signatureX-JWS-Signature

Reached by regulation

Basis: mandated. The law, or a technical standard the law makes binding, names this header. Only a credentialed caller can observe it in flight — the catalog can see a contract declare it, not a deployment honour it.

cma-open-banking-order

Carried by the uk-open-banking-standard standard.

Providers declaring it (35)

aldermore allica-bank bank-of-ireland-uk bank-of-scotland barclays c-hoare-and-co cashplus chase-uk coutts coventry-building-society cynergy-bank danske-bank-uk first-direct gb-bank hampden-and-co investec kroo lloyds-banking-group mastercard monument-bank natwest open-banking-uk paragon-bank payments-canada recognise-bank revolut santander-uk secure-trust-bank shawbrook-bank tandem-bank the-bank-of-london vanquis-banking-group volt-io yorkshire-building-society zopa

Explore

All headers Integrity & Signing Guidance on headers.apievangelist.com

Work with this as data

Every header here is available over the APIs.io API and to AI agents over MCP. HTTP Headers is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for http headers

3 MCP tools reach this
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
Search the catalog
curl "https://apis.io/api/v1/search?q=x-jws-signature&limit=10"
Everything under a tag
curl "https://apis.io/api/v1/tags/x-jws-signature"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.