Check when a key could sign
Ask whether a key was active at a particular time.
/v1/keys/{key}/active-at- Access
- Public; API key optional
- Client
- Browser fetch supported
Parameters#
| Name | Location | Meaning |
|---|---|---|
keyRequired | Path | The 64 hexadecimal characters of an Ed25519 public key, including the Ed25519 half of a composite key. |
t | Query | Unix seconds. Defaults to now. Range 0 through 253402300799. |
Request examples#
curl -fsS 'https://veil.rip/v1/keys/73ad6159583a43f8ad230a215b758db680efcd3ce32ab8e83c622eeca883e68a/active-at'const response = await fetch("https://veil.rip/v1/keys/73ad6159583a43f8ad230a215b758db680efcd3ce32ab8e83c622eeca883e68a/active-at");
const result = await response.json();Try the request#
Response#
at, active, reason, validFrom and validUntil. Reasons include active, not_yet_valid and revoked.
| Field | Type | Meaning |
|---|---|---|
at | integer | Time checked, in Unix seconds. |
active | boolean | Whether the key was active at that time. |
reason | string | active, not_yet_valid or revoked. |
validFrom | string | Publication time of the version that added it. |
validUntil | string | null | Publication time of revocation, or null. |
Example response
Illustrative values. Read the current response from your request.
{
"at": 1793059200,
"active": true,
"reason": "active",
"validFrom": "2026-10-26T12:00:00Z",
"validUntil": null
}Response headers#
| Header | Value | Meaning |
|---|---|---|
Content-Type | application/json | Use the declared media type before choosing a parser. |
Date | HTTP date | Server time. Compare it with your clock when signing requests. |
Retry-After | integer seconds, on rate_limited or busy | Wait at least this long before retrying. Other 429/503 codes do not necessarily include it. |
Errors#
API errors return an error object. Use error.code for program logic; error.message is English text for people and can change. Response and error guide
| HTTP | Code | Meaning and next step |
|---|---|---|
| 400 | invalid_parameter | A path, query or body field is missing, malformed or outside its accepted range. Correct the field named in |
| 404 | not_found | The requested card, key, alias, code or resource was not found. Check the identifier. Temporary codes and previews may already have expired or been used. |
| 410 | erased | The card existed and was erased or removed. The response also carries its public erasure receipt. Stop using this card as current authority. Retain only the public receipt if needed. |
When using an optional API key
| HTTP | Code | Meaning and next step |
|---|---|---|
| 401 | invalid_api_key | The bearer credential is malformed, unknown, expired or revoked. Use an active key. To use anonymous public access, remove |
| 403 | api_key_scope | The API key lacks read or verify scope, or the endpoint does not accept bearer keys. Use the correct scope. Identity writes and key management still require a device signature. |
| 403 | api_key_suspended | This API key is suspended. Ask staff to restore it; another key cannot lift an account suspension. |
| 403 | developer_suspended | The owner’s API account is suspended or the owner card is unavailable. Check the owner account and any staff restriction. Creating another key does not bypass suspension. |
Shared request errors
| HTTP | Code | Meaning and next step |
|---|---|---|
| 429 | rate_limited | An anonymous, signed-request or API-key allowance was exceeded. Wait at least |
| 500 | internal_error | An unexpected server error occurred. Internal details are not returned. Retry reads with bounded backoff. Check write results before sending a new signed operation. |
| 503 | busy | The application has reached a temporary concurrency or database limit. Wait |