API self-description

{
  "name": "ecdsa.com Signature API",
  "version": "1.1.0",
  "description": "Free REST API for ECDSA signature verification, signature format conversion, JWT (ES256/ES384/ES512) decoding and verification, X.509 certificate decoding and TLS signature-health grades.",
  "documentation": "https://ecdsa.com/developers",
  "openapi": "https://ecdsa.com/api/v1/openapi.json",
  "auth": "optional — every operation works without a key except managing webhooks, which needs a key with the webhooks scope. An API key (Authorization: Bearer <key> or X-API-Key) gets per-key rate limits and the quotas of its account's plan.",
  "rateLimit": {
    "requestsPerMinute": 60,
    "healthRequestsPerMinute": 10,
    "scope": "per IP address, per server instance",
    "headers": [
      "X-RateLimit-Limit",
      "X-RateLimit-Remaining",
      "X-RateLimit-Reset"
    ],
    "onExceeded": "HTTP 429 with a Retry-After header"
  },
  "privacy": "Request bodies are processed in memory and never logged. Never send private keys — requests containing one are rejected. For anything secret, use the in-browser tools at https://ecdsa.com: they run entirely client-side.",
  "endpoints": [
    {
      "method": "GET",
      "path": "/api/v1",
      "summary": "This self-description."
    },
    {
      "method": "POST",
      "path": "/api/v1/verify",
      "summary": "Verify an ECDSA signature (P-256, P-384, P-521, secp256k1; DER or raw r‖s)."
    },
    {
      "method": "POST",
      "path": "/api/v1/convert",
      "summary": "Convert an ECDSA signature between DER and raw r‖s, optionally normalizing to low-S."
    },
    {
      "method": "POST",
      "path": "/api/v1/jwt/decode",
      "summary": "Decode a JWT (header, payload, time claims, algorithm info) without verifying the signature."
    },
    {
      "method": "POST",
      "path": "/api/v1/jwt/verify",
      "summary": "Verify an ES256/ES384/ES512 JWT signature against a public key."
    },
    {
      "method": "POST",
      "path": "/api/v1/cert/decode",
      "summary": "Decode an X.509 certificate or chain (PEM or base64/hex DER) with assessments."
    },
    {
      "method": "GET",
      "path": "/api/v1/health/{domain}",
      "summary": "TLS signature-health grade for a public domain (1-hour cache)."
    },
    {
      "method": "GET",
      "path": "/api/v1/webhooks",
      "summary": "List the webhook endpoints of the API key's account (needs a key with the webhooks scope)."
    },
    {
      "method": "POST",
      "path": "/api/v1/webhooks",
      "summary": "Create or update a webhook endpoint of the API key's account (needs a key with the webhooks scope)."
    },
    {
      "method": "POST",
      "path": "/api/v1/webhooks/delete",
      "summary": "Delete a webhook endpoint of the API key's account (needs a key with the webhooks scope)."
    },
    {
      "method": "POST",
      "path": "/api/v1/webhooks/test",
      "summary": "Send a webhook.test event to an endpoint of the API key's account (needs a key with the webhooks scope)."
    },
    {
      "method": "GET",
      "path": "/api/v1/openapi.json",
      "summary": "OpenAPI 3.1 specification of this API."
    }
  ]
}