VGO
DocsContact
Runnable guides

Quickstart

Three separate paths: public verification, authorized diagnostics, and formal rating requests. Production steps appear when the matching capability is enabled.

  1. Public verification

    Use a certificate ID or JWS against the public verify and status resources.

  2. Authorized diagnostics

    Requires customer authorization and L3 credentials.

  3. Formal rating request

    Returns an async job; completed is not the same as certificate issued.

Public verification steps

  1. Open /rank/verify and submit a formal certificate ID, or call POST /v1/certificates/verify with the raw JWS.
  2. Confirm typ=vgo-rank+jwt, audience, issuer and ±60s clock skew against the configured JWKS.
  3. Treat status separately from signature: revoked, expired, restricted and unknown must stay distinct from VR0.

Sandbox diagnostics (not a formal Rank)

Approved sbx_ keys can call the sandbox probe. Never treat sandbox results as a formal Rank.

curl -sS -H "Authorization: Bearer $SBX_KEY" \
  https://sandbox-api.vgoframework.org/v1/diagnostics/preview

Formal rating request

An async job completed is not certificate.issued. This path stays planned until L4 authorization opens.

API contractPublic verifyRequest credentials