> ## Documentation Index > Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt > Use this file to discover all available pages before exploring further. # Register a STIR/SHAKEN delegate certificate > Registers an ATIS-1000092 delegate certificate: the certificate chain (PEM), the SPC it is issued under, its validity window, and the numbers and/or inclusive ranges it covers. Numbers covered by this certificate are then attested at partial (B) on outbound calls — up from C. Full (A) is not conferred: the certificate is not cryptographically validated and the covered-number list is not bound to its real TNAuthList, so authorisation is not provider-verified. Records the authorisation only — it wires no carrier and places no calls; the Devotel softswitch remains the carrier-of-record. Any supplied SPC token is recorded as present but never persisted. Owner/admin only. ## OpenAPI ````yaml /openapi.yaml post /api/v1/compliance/attestation/delegate-certs openapi: 3.1.0 info: title: Devotel CPaaS API description: Orbit by Devotel — Communications Platform as a Service API version: 1.0.0 contact: name: Devotel url: https://devotel.io email: support@devotel.io license: name: Proprietary servers: - url: https://api.orbit.devotel.io description: Production security: - Bearer: [] - ApiKey: [] tags: - name: Messages description: >- Send and manage messages across all channels (SMS, WhatsApp, RCS, Email, Viber, etc.) - name: Fax description: >- List and track fax (MMS/T.38) transmissions on Telnyx-backed fax numbers (sending flows through the Messaging API) - name: Agents description: AI agent creation, configuration, and execution - name: Voice description: Voice calls, IVR, conferencing, and SIP trunking - name: OnCall description: On-call rotations and escalation policy planning for incident alerting - name: Webhooks description: Webhook endpoint management and delivery logs - name: Numbers description: Phone number search, provisioning, and configuration - name: Brand Identity description: >- Unified cross-channel brand trust posture (10DLC, toll-free, WhatsApp, RCS, branded calling, number KYC) - name: Contacts description: Contact management, segmentation, and lifecycle tracking - name: Campaigns description: Marketing campaign orchestration and analytics - name: Flows description: Automation flow builder and execution engine - name: Templates description: Message template management and approval workflows - name: Settings description: Organization, channel, and user preference settings - name: Verify description: OTP generation and verification across channels - name: Push description: Push notification delivery via FCM and APNs - name: Integrations description: Third-party service connections and OAuth management - name: CDP description: >- Customer Data Platform — activation surface (CRM object sync, streaming destinations, ad-audience activation) - name: Files description: >- Server-to-server media upload, listing, retrieval, and deletion (signed-URL backed) - name: Commerce description: >- Omnichannel conversational-commerce — persistent cart + checkout state machine, channel-agnostic hosted pay-by-link, native WhatsApp checkout, and AP2-style agent payment mandates. - name: Sync description: >- Real-time shared-state primitive (Twilio Sync parity) — Documents, Maps, Lists, and ephemeral Streams, with change events relayed over the /api/v1/ws/sync WebSocket gateway paths: /api/v1/compliance/attestation/delegate-certs: post: tags: - Compliance summary: Register a STIR/SHAKEN delegate certificate description: >- Registers an ATIS-1000092 delegate certificate: the certificate chain (PEM), the SPC it is issued under, its validity window, and the numbers and/or inclusive ranges it covers. Numbers covered by this certificate are then attested at partial (B) on outbound calls — up from C. Full (A) is not conferred: the certificate is not cryptographically validated and the covered-number list is not bound to its real TNAuthList, so authorisation is not provider-verified. Records the authorisation only — it wires no carrier and places no calls; the Devotel softswitch remains the carrier-of-record. Any supplied SPC token is recorded as present but never persisted. Owner/admin only. requestBody: required: true content: application/json: schema: type: object additionalProperties: false required: - certificate_pem - not_before - not_after properties: friendly_name: type: string maxLength: 200 description: Operator-supplied label (e.g. "Acme hosted block"). spc: type: string maxLength: 40 description: >- Service Provider Code / OCN the certificate is issued under (public identifier). certificate_pem: type: string description: >- The delegate certificate chain, PEM-encoded (public material — no private key). spc_token: type: string description: >- Short-lived STI-PA SPC token. Presence is recorded; the value is never persisted or logged. covered_numbers: type: array items: type: string description: Individual E.164 numbers enumerated in the TNAuthList. covered_ranges: type: array items: type: object properties: start: type: string end: type: string description: Inclusive E.164 ranges enumerated in the TNAuthList. not_before: type: string format: date-time description: ISO-8601 certificate validity start (notBefore). not_after: type: string format: date-time description: >- ISO-8601 certificate validity end (notAfter). Must be after not_before. responses: '201': description: The newly-registered delegate certificate. content: application/json: schema: type: object properties: data: $ref: '#/components/schemas/DelegateCertificateView' meta: type: object properties: request_id: type: string timestamp: type: string format: date-time '409': description: >- The org is already at the 50-certificate limit, or a non-revoked certificate with this fingerprint is already registered (DELEGATE_CERT_LIMIT / DELEGATE_CERT_DUPLICATE). '422': description: >- Payload validation failed, the certificate_pem is not a valid PEM chain, or a covered range is inverted (VALIDATION_ERROR / INVALID_CERTIFICATE / INVALID_COVERAGE_RANGE). components: schemas: DelegateCertificateView: type: object description: >- An ATIS-1000092 STIR/SHAKEN delegate certificate, annotated with its live effective status + covered-number counts. properties: id: type: string description: Stable id (dcrt_). friendly_name: type: string nullable: true description: Operator-supplied label (e.g. "Acme hosted block"). spc: type: string nullable: true description: >- Service Provider Code / OCN the certificate is issued under (public identifier). fingerprint: type: string nullable: true description: SHA-256 fingerprint (lowercase hex) of the leaf certificate DER. certificate_pem: type: string nullable: true description: >- The delegate certificate chain (PEM). Public material — contains no private key. spc_token_provided: type: boolean description: >- Whether an SPC token was supplied at registration. The raw token value is never persisted or logged. covered_numbers: type: array items: type: string description: Individual E.164 numbers enumerated in the TNAuthList. covered_ranges: type: array items: type: object properties: start: type: string end: type: string description: Inclusive E.164 ranges enumerated in the TNAuthList. not_before: type: string format: date-time not_after: type: string format: date-time status: type: string enum: - active - revoked description: Stored lifecycle status (distinct from the live effective_status). created_at: type: string format: date-time updated_at: type: string format: date-time revoked_at: type: string format: date-time nullable: true effective_status: type: string enum: - active - pending - expired - revoked description: >- Live status derived from status + the [not_before, not_after] validity window. Only `active` confers partial (B) attestation. covered_number_count: type: integer covered_range_count: type: integer securitySchemes: Bearer: type: http scheme: bearer bearerFormat: JWT description: Dashboard JWT token from Clerk ApiKey: type: apiKey name: X-API-Key in: header description: Server-to-server API key (dv_live_sk_*) ````