API Response Signature Headers

Understand how our API's X-SIGNED-BY and X-SIGNATURE headers provide response authenticity and data integrity.

To enhance the integrity of the data transmitted between our API, each response includes specific headers related to digital signatures. These headers allow you to be assured that the response originates from us and has not been tampered with during transit.

Response Headers Overview

Every API response includes the following headers:

• X-SIGNED-BY

• X-SIGNATURE

X-SIGNED-BY

• Description: Indicates the entity responsible for signing the response.

• Value: "Xerberus" This signifies that the response has been signed by our system, named Xerberus.

X-SIGNATURE

• Description: Contains a digital signature of the response body.

• Value: A string representing the signature in JSON Web Signature (JWS) format.

Here is an example of what the response headers might look like:

Content-Type: application/json
X-SIGNED-BY: Xerberus
X-SIGNATURE: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...