---
# @generated by sylphx-gen. Do not edit.
title: "Sign vapid assertion on a connection"
description: "`broker.connections.sign_vapid_assertion` (POST /v1/{name}:signVapidAssertion): Signs an RFC 8292 assertion using a committed same-org Web Push Connection."
type: reference
product: platform
summary: "Signs an RFC 8292 assertion using a committed same-org Web Push Connection."
updated: 2026-09-28
nav: false
---

Signs an RFC 8292 assertion using a committed same-org Web Push Connection. The stored contact supplies the subject; an ordinary caller must hold broker:exchange on this exact Connection and satisfy its TrustPolicy.

- **Path** `POST https://api.sylphx.com/v1/orgs/acme/connections/connection:signVapidAssertion`
- **Scope** `broker:exchange`
- **Effect** `read` — nothing is written.
- **Collection** [connections](/docs/api/connections)

## Request

| Field | Type | What it is |
| --- | --- | --- |
| `name` | `string` | Exact same-org Web Push Connection. Required. |
| `audience` | `string` | HTTPS origin only, without explicit path, userinfo, query or fragment. Required. |
| `ttl` | `duration` | Positive whole seconds; default 43200s, maximum 86400s and policy ceiling. |

## Response

| Field | Type | What it is |
| --- | --- | --- |
| `authorization` | `string` | Complete RFC 8292 Authorization header, returned only on this call. Never returned again. |
| `jwt` | `string` | Compact ES256 JWT, returned only on this call. Never returned again. |
| `application_server_key` | `bytes` | The raw 65-byte uncompressed P-256 public point. ProtoJSON uses padded standard base64; decode it to bytes before passing it to PushManager. |
| `expire_time` | `timestamp` | When the push service stops honoring this assertion. |

## Errors

- [`UNAUTHENTICATED`](/docs/api/errors/UNAUTHENTICATED) — No valid key or token was presented.
- [`PERMISSION_DENIED`](/docs/api/errors/PERMISSION_DENIED) — The key lacks the method's permission.
- [`RESOURCE_NOT_FOUND`](/docs/api/errors/RESOURCE_NOT_FOUND) — The named Resource does not exist or is not visible.
- [`INVALID_FIELD`](/docs/api/errors/INVALID_FIELD) — A field failed validation.
- [`INVALID_STATE`](/docs/api/errors/INVALID_STATE) — The Resource is in a state that forbids the call.
- [`UNKNOWN_FIELD`](/docs/api/errors/UNKNOWN_FIELD) — The request has a field the schema does not know.
- [`ETAG_MISMATCH`](/docs/api/errors/ETAG_MISMATCH) — The etag sent does not match the Resource's current etag.
- [`UNAVAILABLE`](/docs/api/errors/UNAVAILABLE) — The Resource store, the owning service's backend, or the key verifier's snapshot is unavailable; retry after Retry-After.
- [`RATE_LIMITED`](/docs/api/errors/RATE_LIMITED) — The rate limit is reached; see Retry-After.

Every error arrives in the body [Errors](/docs/platform/errors) describes.

## Examples

**cURL**

```curl
curl -X POST "https://api.sylphx.com/v1/orgs/acme/connections/connection:signVapidAssertion" \
  -H "Authorization: Bearer $SYLPHX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"audience":"…"}'
```

**TypeScript**

```ts
const response = await sylphx.broker.connections.signVapidAssertion({ audience: '…', name: 'orgs/acme/connections/connection' })
```

**Rust**

```rust
let mut req = sylphx::broker::SignVapidAssertionRequest::default();
req.audience = "…".to_string();
req.name = "orgs/acme/connections/connection".to_string();
let response = sx.broker().connections().sign_vapid_assertion(req).await?;
```

**CLI**

```bash
sylphx broker connections sign-vapid-assertion orgs/acme/connections/connection
```

**MCP**

```json
{ "method_id": "broker.connections.sign_vapid_assertion", "args": {"audience":"…","name":"orgs/acme/connections/connection"} }
```