Skip to content

Get latest KTL tree root (unsigned)

GET
/api/v1/ktl/root/latest
curl --request GET \
--url https://localhost:3001/api/api/v1/ktl/root/latest

Public: return the latest published Merkle-tree root of the Key Transparency Log (epoch, last_seq, merkle_root, created_at). No authentication required. The root is NOT signed: no code path writes a root signature, and the reserved signed_by field stays empty and is therefore omitted from the response. An inclusion proof checked against this root shows only that the server is consistent with its own log; it is not evidence against a malicious or compromised server. Signed tree heads and consistency proofs are planned, not shipped. Returns 404 until the first root has been published, and 503 unless the operator set ZENTALK_KTL_PUBLIC_READ=true. That flag gates only these three read routes and is separate from ZENTALK_KTL_ENABLED, which gates the append hook and the epoch worker: a server that is writing the log may still answer 503 here, and that is the intended Closed-Beta posture.

OK

Media typeapplication/json
object
key
additional properties
any
Examplegenerated
{}

Not Found

Media typeapplication/json
object
error
string
success
boolean
Examplegenerated
{
"error": "example",
"success": true
}

Internal Server Error

Media typeapplication/json
object
error
string
success
boolean
Examplegenerated
{
"error": "example",
"success": true
}

Service Unavailable

Media typeapplication/json
object
error
string
success
boolean
Examplegenerated
{
"error": "example",
"success": true
}