Reference
Bind a host's public key to its credential
Run once, when a keypair host is first set up.
POST
/api/v1/auth/keypair/enrollRun once, when a keypair host is first set up. It spends the one-time enrollment secret and records the public key, after which the host authenticates by signing challenges. A second attempt matches no row.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
The one-time pce_ secret the console issued, and the public half of a keypair this host just generated. The public key is an Ed25519 SPKI DER, base64. The prefix differs from pck_ on purpose, so the enrollment secret can never be presented as a bearer credential.
Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/v1/auth/keypair/enroll" \ -H "Content-Type: application/json" \ -d '{ "secret": "string", "publicKey": "string" }'{ "credentialId": "string", "generation": -9007199254740991}