Signing Worker Protocol
GET /v1/health
Report the worker's status and list the connection tokens of the accounts it accepts
Private beta. Qualified signatures are available on request. Request access and we enable them for your account. SWP/1 is in beta and may change.
A status check that also tells SignatureAPI which accounts your worker accepts. SignatureAPI calls it during the connection checks: when an account connects or replaces your worker, and when it selects Run Checks. It never calls it while signing.
Request
GET {worker URL}/v1/health
No token, no body and no authentication. Don’t redirect it.
Response
Answer 200 within 5 seconds:
{
"status": "ok",
"connection_tokens": [
"swpct_xulVJ9y9r1RWzRVwMZSzC4AMxZPCvI7W",
"swpct_mYpxjUwvQpx33z6AT0Os67xaW8ZaLQkg"
]
}
| Field | Description |
|---|---|
status | ok, or degraded when the worker works with reduced capacity. It should reflect whether your worker can reach its provider. |
connection_tokens | The connection tokens of the accounts allowed to use this worker. List one entry per account and mode. |
You may add other fields. SignatureAPI ignores them.
Connection tokens
Each SignatureAPI account has one connection token per mode. The account owner copies it from Settings › Developers › Qualified Signatures and gives it to you. Add it to your worker’s configuration so that:
GET /v1/healthlists it inconnection_tokens. The Connection token check fails for any account whose token isn’t listed, and a connect or replace saves nothing.- Every authenticated request whose token claim
connection_tokenisn’t on the list gets401. See Verify a request.
A worker that serves one account in test and live mode lists two tokens. A worker that serves several accounts lists each of them. To stop serving an account, remove its token from both places.