# API Response Signature Headers

To enhance the integrity of the data transmitted between our API, each response includes specific headers related to digital signatures. These headers allow you to be assured that the response originates from us and has not been tampered with during transit.

### Response Headers Overview

Every API response includes the following headers:

* **`X-SIGNED-BY`**
* **`X-SIGNATURE`**

#### `X-SIGNED-BY`

* **Description**: Indicates the entity responsible for signing the response.
* **Value**: `"Xerberus"`\
  This signifies that the response has been signed by our system, named *Xerberus*.

#### `X-SIGNATURE`

* **Description**: Contains a digital signature of the response body.
* **Value**: A string representing the signature in JSON Web Signature (JWS) format.

Here is an example of what the response headers might look like:

```
Content-Type: application/json
X-SIGNED-BY: Xerberus
X-SIGNATURE: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
```
