AddCatalogSourceRequest

urlstringrequired

An https address with no credentials, query or fragment; the archive and its signature are fetched from beneath it.

publicKeystring

The Ed25519 public key the archive is signed with, as PEM or the base64 of the raw 32 bytes. Absent means the source is unsigned; a key that is present but blank is refused with 400, never read as unsigned.

AddCatalogSourceRequest

{
  "url": "string",
  "publicKey": "string"
}