federation_key_bind
InactiveTool of ComOS Federation Gateway
Bind a public key to your manager root (CO 314): present { public_key, alg, signature } where the signature is over the nonce from federation_key_challenge. The federation VERIFIES the signature against the public key before persisting — a wrong key, an expired/absent nonce, or a tampered signature binds nothing. alg is 'ed25519' (primary) or 'es256' (EC P-256). Re-binding rotates the key. Identity is read from your token. Requires tenants:write.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"public_key",
"alg",
"signature"
],
"properties": {
"alg": {
"type": "string",
"description": "Signature algorithm: 'ed25519' (primary) or 'es256' (EC P-256)."
},
"signature": {
"type": "string",
"description": "base64 (or base64url) signature over the challenge nonce bytes."
},
"public_key": {
"type": "string",
"description": "Your public key: SPKI PEM (-----BEGIN PUBLIC KEY-----), or a raw base64 32-byte key for ed25519."
}
},
"additionalProperties": false
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
ComOS Federation Gateway
https://github.com/ronrey/comos-federation
2/7 registries