Trusset Protocol - Infrastructure for Asset Tokenization

PUT

customers

api

identity

operator-key

curl -X PUT "https://api.trusset.org/customers/api/identity/operator-key" \
  -H "X-API-Key: trusset_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "publicKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "proofVerificationEnabled": true,
    "maxStalenessDays": 365
  }'

{
  "success": true,
  "data": {
    "operatorKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "operatorKeySetAt": "2026-09-06T12:00:00.000Z",
    "proofVerificationEnabled": true,
    "proofVerificationEnforced": true,
    "maxStalenessDays": 365
  }
}

Records the public half of the key the KYC zk-Proof Tool signs manifests with, and sets how strictly proofs are enforced on this instance. The key is public by nature. No secret reaches this API, and the private half never leaves the machine that runs the tool. npm run show prints the value to send here.

Body Parameters

Send any combination. Sending none is refused with NOTHING_TO_UPDATE.

string

32-byte ed25519 public key as 64 hex characters, with or without a 0x prefix. It is stored lowercased and unprefixed. Send null to clear the key, which leaves this instance unable to verify any production bundle.

boolean

Whether this instance requires a real proof behind every claim. When true, a stub manifest is refused and a commitment-only leaf cannot be attested.

integer

How old a bundle’s batch date may be before it is refused with PROOF_STALE. Integer between 1 and 36500.

Response Fields

object

Show child attributes

string

The stored key, lowercased and unprefixed, or null.

string

When it was last set, ISO 8601, or null.

boolean

What this instance asked for.

boolean

What actually applies. It is true when the instance asked for it, and also when the network’s own trust anchors require proofs regardless. Read this one, not the setting.

integer

The staleness bound in effect.

Rotating the key does not re-verify anything already attested. Claims filed under the old key stay on the registry, and their manifests no longer verify against the new one. Rotate deliberately, and keep the old key with the bundles it signed.

Every change is written to the customer audit log as PROOF_OPERATOR_KEY_UPDATED, recording whether the key changed, whether it was cleared, and which settings moved.

curl -X PUT "https://api.trusset.org/customers/api/identity/operator-key" \
  -H "X-API-Key: trusset_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "publicKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "proofVerificationEnabled": true,
    "maxStalenessDays": 365
  }'

{
  "success": true,
  "data": {
    "operatorKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "operatorKeySetAt": "2026-09-06T12:00:00.000Z",
    "proofVerificationEnabled": true,
    "proofVerificationEnforced": true,
    "maxStalenessDays": 365
  }
}

Error Codes

Code	HTTP	Cause
`INVALID_KEY`	`400`	`publicKey` is not 64 hex characters
`INVALID_STALENESS`	`400`	`maxStalenessDays` is not an integer between 1 and 36500
`NOTHING_TO_UPDATE`	`400`	None of the three fields was supplied
`INSTANCE_NOT_FOUND`	`404`	The instance behind your key no longer exists
`OPERATOR_KEY_FAILED`	`500`	The update could not be written

curl -X PUT "https://api.trusset.org/customers/api/identity/operator-key" \
  -H "X-API-Key: trusset_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "publicKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "proofVerificationEnabled": true,
    "maxStalenessDays": 365
  }'

{
  "success": true,
  "data": {
    "operatorKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "operatorKeySetAt": "2026-09-06T12:00:00.000Z",
    "proofVerificationEnabled": true,
    "proofVerificationEnforced": true,
    "maxStalenessDays": 365
  }
}

Overview

MiCA Register

Customers

Tokenization

Trading

Lending

Asset Register

Vaults

Set Operator Key

Body Parameters

Response Fields

Error Codes

​Body Parameters

​Response Fields

​Error Codes

Body Parameters

Response Fields

Error Codes