curl -sS -X POST "https://phosra-api-sandbox-production.up.railway.app/api/v1/advisors/did:ocss:loopline/payload-key" \
  -H "Content-Type: application/json" \
  -d '{
  "payload_public_key_jwk": "{\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}",
  "sig": "base64url-ed25519-signature-over-the-v2-preimage",
  "issued_at": "2026-07-06T14:30:00Z"
}'

const BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1";
const res = await fetch(`${BASE}/advisors/did:ocss:loopline/payload-key`, {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "payload_public_key_jwk": "{\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}",
    "sig": "base64url-ed25519-signature-over-the-v2-preimage",
    "issued_at": "2026-07-06T14:30:00Z"
  }),
});
console.log(res.status, await res.json());

import requests

BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1"
res = requests.post(
    f"{BASE}/advisors/did:ocss:loopline/payload-key",
    json={
        "payload_public_key_jwk": "{\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}",
        "sig": "base64url-ed25519-signature-over-the-v2-preimage",
        "issued_at": "2026-07-06T14:30:00Z"
    },
)
print(res.status_code, res.json())

package main

import (
	"bytes"
	"fmt"
	"io"
	"net/http"
)

func main() {
	base := "https://phosra-api-sandbox-production.up.railway.app/api/v1"
	body := bytes.NewBufferString(`{
  "payload_public_key_jwk": "{\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\"}",
  "sig": "base64url-ed25519-signature-over-the-v2-preimage",
  "issued_at": "2026-07-06T14:30:00Z"
}`)
	req, _ := http.NewRequest("POST", base+"/advisors/did:ocss:loopline/payload-key", body)
	req.Header.Set("Content-Type", "application/json")
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
	out, _ := io.ReadAll(resp.Body)
	fmt.Println(resp.Status, string(out))
}

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://phosra-api-sandbox-production.up.railway.app/api/v1/advisors/{id}/payload-key",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'payload_public_key_jwk' => '<string>',
    'sig' => '<string>',
    'issued_at' => '2023-11-07T05:31:56Z'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://phosra-api-sandbox-production.up.railway.app/api/v1/advisors/{id}/payload-key")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"payload_public_key_jwk\": \"<string>\",\n  \"sig\": \"<string>\",\n  \"issued_at\": \"2023-11-07T05:31:56Z\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://phosra-api-sandbox-production.up.railway.app/api/v1/advisors/{id}/payload-key")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"payload_public_key_jwk\": \"<string>\",\n  \"sig\": \"<string>\",\n  \"issued_at\": \"2023-11-07T05:31:56Z\"\n}"

response = http.request(request)
puts response.read_body

{
  "advisor_id": "7e4c1a90-3b28-4d67-95f1-0a8c6b2e9d43",
  "payload_key_kid": "did:ocss:touchstone#payload-2026-07",
  "status": "declared"
}

{
  "error": "Bad Request",
  "message": "payload_public_key_jwk is required (clearing a declared key is not self-service)",
  "code": 400
}

{
  "error": "Unauthorized",
  "message": "declaration signature invalid or stale",
  "code": 401
}

{
  "error": "Forbidden",
  "message": "advisor is revoked",
  "code": 403
}

{
  "error": "Not Found",
  "message": "advisor not found",
  "code": 404
}

{
  "error": "Request Entity Too Large",
  "message": "request body exceeds the declaration size bound",
  "code": 413
}

{
  "error": "Too Many Requests",
  "message": "rate limit exceeded",
  "code": 429
}

{
  "error": "Internal Server Error",
  "message": "internal error",
  "code": 500
}

{
  "error": "Bad Gateway",
  "message": "downstream provider error",
  "code": 502
}

{
  "error": "Service Unavailable",
  "message": "downstream provider unavailable",
  "code": 503
}