kagitaba KMS
Access-policy issuance for kagitaba keychain items (1Password-compatible vault data model, ADR-2607023000). Policies are signed ES256 JWTs; issuer did:web:kagitaba.kotoba.cloud.
XRPC methods (prefix cloud.kotoba.kms.): issueAccessPolicy / getAccessPolicy / addRecipient / removeRecipient / revokeAccessPolicy. Mutations require an admin bearer token.
curl -s https://kagitaba.kotoba.cloud/health
curl -s "https://kagitaba.kotoba.cloud/xrpc/cloud.kotoba.kms.getAccessPolicy?policyCid=..."
curl -s -X POST -H "Authorization: Bearer $ADMIN" -H 'content-type: application/json' \
-d '{"resourcePattern":"kagitaba://vault/demo/**","recipients":["did:example:alice"]}' \
https://kagitaba.kotoba.cloud/xrpc/cloud.kotoba.kms.issueAccessPolicy