How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Infisical

Infisical PKI Signers API

The PKI Signers API from Infisical — 21 operation(s) for pki signers.

Documentation Provider Profile APIs.io OpenAPI GitHub

Infisical PKI Signers API is one of 73 APIs that Infisical publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include PKI Signers. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

This API exposes 32 operations across 21 paths. It is described by OpenAPI 3.2.0, at version 0.0.1.

Requests are made against 3 base URLs: https://us.infisical.com, https://eu.infisical.com, http://localhost:8080.

32 operations 21 paths 0 schemas 4 DELETE13 GET5 PATCH9 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
0.0.1
Base URL
https://app.infisical.com
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Infisical PKI Signers API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth).

  • bearerAuth — An access token in Infisical

Paths & Operations 32

Across 21 paths, the API surfaces 32 operations — 4 DELETE, 13 GET, 5 PATCH, 9 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

PKI Signers 32
POST
/api/v1/cert-manager/signers
Create a code signing signer
createSigner body → 200400401403404422500
GET
/api/v1/cert-manager/signers
List code signing signers for a project
listSigners 3 params → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}
Get a code signing signer by ID
getSignerById 1 param → 200400401403404422500
PATCH
/api/v1/cert-manager/signers/{signerId}
Update a code signing signer
updateSigner 1 param body → 200400401403404422500
DELETE
/api/v1/cert-manager/signers/{signerId}
Delete a code signing signer
deleteSigner 1 param → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/permissions
Get the actor's effective resource permissions on this signer.
getSignerPermissions 1 param → 200400401403404422500
PATCH
/api/v1/cert-manager/signers/{signerId}/status
Enable or disable a signer in a single endpoint
updateSignerStatus 1 param body → 200400401403404422500
POST
/api/v1/cert-manager/signers/{signerId}/sign
Sign a pre-hashed digest with a code signing signer
signData 1 param body → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/public-key
Get the public key for a code signing signer
getSignerPublicKey 1 param → 200400401403404422500
POST
/api/v1/cert-manager/signers/{signerId}/certificate/reissue
Re-issue the signer's certificate (optionally from a different CA)
reissueSignerCertificate 1 param body → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/certificate
Export the signer's leaf certificate as PEM
exportSignerCertificate 1 param → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/approval-policy
Read the signer's approval policy (steps, approvers, limits)
getSignerApprovalPolicy 1 param → 200400401403404422500
PUT
/api/v1/cert-manager/signers/{signerId}/approval-policy
Replace the signer's approval policy (steps, approvers, limits)
updateSignerApprovalPolicy 1 param body → 200
GET
/api/v1/cert-manager/signers/{signerId}/requests
List signing approval requests for a signer
listSignerRequests 4 params → 200
POST
/api/v1/cert-manager/signers/{signerId}/requests
Open a request to sign with this signer (operator self-serve)
requestToSign 1 param body → 200
POST
/api/v1/cert-manager/signers/{signerId}/requests/pre-approve
Pre-approve signing for a member (admin only)
preApproveSigning 1 param body → 200
POST
/api/v1/cert-manager/signers/{signerId}/requests/{requestId}/revoke
Revoke a pending or active signing request
revokeSignerRequest 2 params → 200
GET
/api/v1/cert-manager/signers/{signerId}/operations
List signing operations for a signer
listSigningOperations 4 params → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/users
List user members of a signer
listSignerUserMembers 1 param → 200400401403404422500
POST
/api/v1/cert-manager/signers/{signerId}/users
Add user members to a signer
addSignerUserMembers 1 param body → 200400401403404422500
PATCH
/api/v1/cert-manager/signers/{signerId}/users/{userId}
Update a user member's role on a signer
updateSignerUserRole 2 params body → 200400401403404422500
DELETE
/api/v1/cert-manager/signers/{signerId}/users/{userId}
Remove a user from a signer
removeSignerUserMember 2 params → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/effective-users
List users that can act on this signer either through a direct membership or through a group that's a signer member.
listSignerEffectiveUserMembers 1 param → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/identities
List machine identity members of a signer
listSignerIdentityMembers 1 param → 200400401403404422500
POST
/api/v1/cert-manager/signers/{signerId}/identities
Add a machine identity to a signer
addSignerIdentityMember 1 param body → 200400401403404422500
PATCH
/api/v1/cert-manager/signers/{signerId}/identities/{identityId}
Update a machine identity's role on a signer
updateSignerIdentityRole 2 params body → 200400401403404422500
DELETE
/api/v1/cert-manager/signers/{signerId}/identities/{identityId}
Remove a machine identity from a signer
removeSignerIdentityMember 2 params → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/effective-identities
List machine identities that can act on this signer either directly or via a group that's a signer member.
listSignerEffectiveIdentityMembers 1 param → 200400401403404422500
GET
/api/v1/cert-manager/signers/{signerId}/groups
List group members of a signer
listSignerGroupMembers 1 param → 200400401403404422500
POST
/api/v1/cert-manager/signers/{signerId}/groups
Add a group to a signer
addSignerGroupMember 1 param body → 200400401403404422500
PATCH
/api/v1/cert-manager/signers/{signerId}/groups/{groupId}
Update a group's role on a signer
updateSignerGroupRole 2 params body → 200400401403404422500
DELETE
/api/v1/cert-manager/signers/{signerId}/groups/{groupId}
Remove a group from a signer
removeSignerGroupMember 2 params → 200400401403404422500

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

infisical-pki-signers-api-openapi.yml Raw ↑

Other APIs Infisical publishes across the network.

Infisical Admin API
AE Profile APIs.io
Infisical Alibaba Cloud Auth API
AE Profile APIs.io
Infisical App Connections API
AE Profile APIs.io
Infisical Audit Logs API
AE Profile APIs.io
Infisical AWS Auth API
AE Profile APIs.io
Infisical Azure Auth API
AE Profile APIs.io
Infisical Cert Manager API
AE Profile APIs.io
Infisical Dynamic Secrets API
AE Profile APIs.io
Infisical Environments API
AE Profile APIs.io
Infisical Event Subscriptions API
AE Profile APIs.io
Infisical Folders API
AE Profile APIs.io
Infisical GCP Auth API
AE Profile APIs.io
#PKI Signers
← Back to I APIs
API Details
ID
infisical:infisical-pki-signers-api
Base URL
https://app.infisical.com
Docs
https://infisical.com/docs/api-reference/overview/introduction
Provider
Infisical
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=infisical-pki-signers-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/infisical-pki-signers-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Infisical PKI Signers API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.