{"service":"kym-registry","issuer":"https://registry.kymregistry.com","kid":"kym-registry-2026-10-22","jwks":"https://registry.kymregistry.com/.well-known/jwks.json","endpoints":[{"method":"GET","path":"/.well-known/jwks.json","description":"The issuer's public key. The one key every verifier trusts."},{"method":"GET","path":"/status/:jti","description":"A credential's live status. The only live call verification makes."},{"method":"GET","path":"/v1/verify?domain=","description":"Verify a domain. Rate limited per IP."},{"method":"GET","path":"/v1/merchants","description":"Verified merchants and their status. Paginated. Rate limited per IP."},{"method":"GET","path":"/v1/hosted-credential?domain=","description":"KYM's copy of a credential for a domain proved by DNS, for verifiers following the _kym TXT record."}]}