igrantio-api-trust-anchorlisted

# iGrant.io OID4VC API - Trust Anchor group ## When to use Use this skill when you: - add an **ETSI trust list** to the organisation so that the service validates the issuers and verifiers it meets in a flow; - read, update, enable, disable or delete a trust authority; - must know why the list starts with 2 records that you did not create. Base URL for demo: `https://demo-api.igrant.io`. Auth header: `Authorization: ApiKey <key>` (note the trailing space in the prefix). A bearer access token also works. A trust authority points to a trust list. The service uses the trust lists to validate issuers and verifiers in OID4VCI and OpenID4VP flows. ## Prerequisites - An **iGrant.io Organisation Wallet Suite (OWS) API key**. Get it from [support@igrant.io](mailto:support@igrant.io). Keep it on the server, in an environment variable or a secret manager. The browser never sees it. - The **OWS environment** the key belongs to. The default is **demo** (`https://demo-api.igrant.io`). Use **staging** (`https://staging-api.igrant.io`) only when the integrator asks for it. A key works only in its own environment. ## Ask the integrator first Ask one question at a time. Wait for the answer. Give the recommended default with each question. Look up facts in the project (framework, environment variables, an existing backend) instead of asking for them. Record the answers before you write code. 1. **Environment** - demo or staging? _Default demo (`https://demo-api.igrant.io`);