Verify a key

Verifies a signature made by a SIGN key.

Checked 2026-09-28

This method is not served on the public API. api.sylphx.com does not route this call: its backend is not deployed behind the public API, or does not implement the call. This page documents the contract. It is kept out of the sidebar and of search engines.

Verifies a signature made by a SIGN key.

Not available yet. Sylphx Keys is declared in the registry but no backend serves it: every call answers 501 with the problem code UNIMPLEMENTED.

Path POST https://api.sylphx.com/v1/orgs/acme/projects/shop/envs/production/keys/key:verify
Scope keys:verify
Effect read — nothing is written.
Collection keys

#Request

Field	Type	What it is
`name`	`string`	The key to use. Required.
`key_version`	`string`	The version to use; default the primary version; the signature names none.
`data`	`bytes`	The signed message. Set exactly one of `data` and `digest`.
`digest`	`bytes`	The digest of the signed message.
`signature`	`bytes`	The signature to check. Required.

#Response

Field	Type	What it is
`valid`	`bool`	The signature is valid.

#Errors

UNAUTHENTICATED — No valid key or token was presented.
PERMISSION_DENIED — The key lacks the method's permission.
RESOURCE_NOT_FOUND — The named Resource does not exist or is not visible.
INVALID_FIELD — A field failed validation.
INVALID_STATE — The Resource is in a state that forbids the call.
RATE_LIMITED — The rate limit is reached; see Retry-After.

Every error arrives in the body Errors describes.

#Examples

curl -X POST "https://api.sylphx.com/v1/orgs/acme/projects/shop/envs/production/keys/key:verify" \
  -H "Authorization: Bearer $SYLPHX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"signature":"…"}'

Was this page helpful?

Tell us what is missing, wrong, or unclear — this opens a real inbox.

Send feedback

Platform links