ARIA1.0
English only · Spanish [PLANNED]

Registry API — operated by TUNO Labs

The public, read-only API at https://api.aria.bar. The table is generated from the API's route files by scripts/gen-api-routes.mjs; it is the same component /developers renders. There is no write endpoint on this host. This is the operator's implementation, not the protocol: the protocol is at /spec.

● live● deprecated● planned
GET
/.well-known/aria● liveSpec §5.2

Discovery document: issuer DID, cryptosuite, status list, MCP endpoint.

GET
/.well-known/aria/trust-levels● liveSpec §2

The four levels as the registry issues them.

GET
/health● live

Liveness.

GET
/health/ready● live

Readiness.

POST
/mcp● liveSpec Appendix A

Public MCP server, Streamable HTTP. Eight read-only tools.

GET
/v1/aids/{did}● liveSpec §3.5.2

Fetch the current AID (W3C VC) for a did:aria. This is the URL the DNS pointer names for registry-form identifiers. It returns the credential, not a DID Resolution result; the DID Document is derived client-side (§3.2) until the resolver endpoint ships.

GET
/v1/audit/{did}● liveSpec §7

Hash-chained lifecycle record for one identifier. No personal data.

GET
/v1/badge/{did}● live

SVG badge for one identifier.

GET
/v1/credentials/{credentialId}● liveSpec §3.5.2

Fetch one credential instance by its id, including superseded ones.

GET
/v1/orgs/{domain}● live

Public organization record by domain: principal DID, level, active agents.

GET
/v1/scopes● liveSpec §6

The scope registry: namespaces, resources, actions and versions.

GET
/v1/stats● live

Ecosystem counters.

GET
/v1/status/{listId}● liveSpec §7

W3C Bitstring Status List credential. Refreshed within the COM-05 bound.

GET
/v1/verify/{did}● liveSpec §5.1

Server-side verification: signature, status, expiry, trust level. Prefer the SDK for offline checks.

GET
/.well-known/aria-atp● deprecatedSpec §8

Legacy policy discovery. ATP/1 §2.0: the receiver policy lives only in DNS (_aria-policy TXT).

POST
/v1/challenge● plannedSpec §8

Receiver challenge for the holder proof (ATP/1 step 2). Returns 503 until enabled.

Generated from aria-api/src on 2026-09-07 · scripts/gen-api-routes.mjs

Start with discovery

curl · runs against https://api.aria.bar/.well-known/aria
$ curl -s https://api.aria.bar/.well-known/aria
{
  "protocol": "ARIA",
  "didMethod": "did:aria",
  "cryptoSuites": ["mldsa65-ed25519-2026"],
  "issuer": "did:aria:registry.aria.bar",
  "statusList": "https://api.aria.bar/v1/status/1",
  "api": "https://api.aria.bar/v1",
  "mcp": "https://api.aria.bar/mcp",
  "spec": "https://aria.bar/spec"
}