Read the generated mesh registration bundle

GET

/.well-known/cotal-mesh

const url = 'https://auth.example.invalid/.well-known/cotal-mesh';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://auth.example.invalid/.well-known/cotal-mesh

GET only. Permits Origin headers, with no CORS headers. Fetch only from the pinned HTTPS authority origin: this generated bundle contains trust pins and a deny-all sentinel credential. endpoints.url is the advertised post-bind public URL; optional agentProvisioningUrl advertises a separate host endpoint, not a route in this listener.

Responses

200

Successful response.

application/json

object

space

required

string

>= 1 characters

server

required

string

>= 1 characters

tlsRequired

required

userAuth

required

object

provider

required

Allowed value: cotal

idp

required

object

url

required

string

>= 1 characters

issuer

required

string

>= 1 characters

audience

required

string

>= 1 characters

endpoints

required

object

url

required

string

>= 1 characters

managerAuthorityUrl

required

string

>= 1 characters

agentProvisioningUrl

string

>= 1 characters

sentinelCreds

required

string

>= 1 characters

Example

{
  "tlsRequired": true,
  "userAuth": {
    "provider": "cotal"
  }
}

405

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

503

Public admission cap (64 in flight), 10 second request deadline, or a route-specific unavailable read/effect. A service authority 503 may follow a binding; retain the request identity.

application/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}