How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Signal Keys API

Pre-key bundle management endpoints for uploading and retrieving public key material used in the Signal Protocol key exchange.

Signal Keys API is one of 14 APIs that Signal publishes on the APIs.io network, described by a machine-readable OpenAPI specification and an AsyncAPI event-driven specification.

This API exposes 1 JSON Schema definition.

Tagged areas include Keys. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an AsyncAPI specification, a JSON-LD context, and 1 JSON Schema.

This API exposes 3 operations across 2 paths, and defines 7 schemas. It is described by OpenAPI 3.2.0, at version 2.0.

Requests are made against a single base URL, https://chat.signal.org.

3 operations 2 paths 7 schemas 2 GET1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2.0
Base URL
https://chat.signal.org
Authentication
HTTP Basic, HTTP Bearer
License
Terms of Service
Resource Areas
1

Authentication & Security 2

Signal Keys API declares 2 security schemes for authenticating requests. It accepts HTTP basic authentication (basicAuth). It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

  • basicAuth — HTTP Basic authentication using the account UUID (or phone number) and password. The password is established during account registration.
  • bearerAuth — Bearer token authentication used for certain provisioning and registration flows.

Paths & Operations 3

Across 2 paths, the API surfaces 3 operations — 2 GET, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Keys 3

Pre-key bundle management endpoints for uploading and retrieving public key material used in the Signal Protocol key exchange.

GET
/v2/keys
Get pre-key counts
getPreKeyCount → 200401
PUT
/v2/keys
Upload pre-keys
setKeys body → 204401
GET
/v2/keys/{identifier}/{deviceId}
Get pre-key bundle for a device
getDeviceKeys 2 params → 200404

Schemas 7

The contract defines 7 schemas that model the data the API accepts and returns. The most detailed are DevicePreKeyBundle (5 properties), SetKeysRequest (4 properties), KyberPreKey (3 properties), SignedPreKey (3 properties). Each schema is shown below with its type and property counts.

SignedPreKey
object
3 properties 3 required
SetKeysRequest
object
4 properties
DevicePreKeyBundle
object
5 properties
KyberPreKey
object
3 properties 3 required
PreKeyBundle
object
2 properties
PreKey
object
2 properties 2 required
PreKeyCount
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

signal-keys-api-openapi.yml Raw ↑

Other APIs Signal publishes across the network.

Signal Protocol Specifications
Signal libsignal SDK
Signal Android SDK
Signal iOS SDK
Signal Desktop SDK
Signal Accounts API
Signal Attachments API
Signal Certificates API
Signal Devices API
Signal Messages API
Signal Profiles API
Signal Registration API
Where this information came from

This is an independent, third-party profile of Signal Keys API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.