Registry API
Signing keys
Register, list and revoke the public keys used to verify package signatures.
wl signing register and wl signing verify use these operations.
Operations
| Request | What it does |
|---|---|
| POST /api/v1/signing/keys | Register a signing key |
| GET /api/v1/signing/keys | List signing keys |
| DELETE /api/v1/signing/keys/{id} | Revoke a signing key |
Paths and summaries come from apps/api/openapi.json, which CI regenerates from the route definitions; this site checks its list against that file. Telemetry ingest accepts a workspace key without a user session; everything else needs a signed-in user.