AIMCIS Trust Registry API
Registry REST API | Version 1.0
The AIMCIS Trust Registry provides a public REST API for querying entity certification status, publishing new declarations, and retrieving attestation certificates.
Base URL
https://registry.aimcis.org/api/v1/
Endpoints
| Method | Path | Description |
|---|
| GET | /entities/{publisher_id} | Retrieve entity certification portfolio |
| GET | /entities/{publisher_id}/domains/{domain_code} | Retrieve domain-specific certification details |
| POST | /entities | Create new entity self-declaration (AL0) |
| PATCH | /entities/{publisher_id} | Update entity declaration fields |
| GET | /attestations/{atr_record_id} | Retrieve attestation certificate by ID |
| GET | /domains | List all registered domains with criteria summaries |
| GET | /aaas | List all registered Attestation Authorities |
| GET | /publications/{publication_id} | Retrieve publication provenance record |
Authentication
| Endpoint | Auth Method |
|---|
| All GET endpoints | No auth required (public) |
| POST /entities | X-AIMCIS-Signature header with Ed25519 signature of request body |
| PATCH /entities/{id} | X-AIMCIS-Signature header with Ed25519 signature of patch payload |
Error Responses
| Status Code | Description |
|---|
| 400 | Invalid request body or query parameter |
| 401 | Missing or invalid X-AIMCIS-Signature header |
| 403 | Publisher ID does not match signature subject |
| 404 | Entity or attestation not found |
| 409 | DNS TXT record mismatch with Registry entry |
| 429 | Rate limit exceeded (100 requests per minute) |
The Registry API is rate-limited at 100 requests per minute for unauthenticated clients. Authenticated clients (with valid X-AIMCIS-Signature) are rate-limited at 1,000 requests per minute.
