Store, validate, and resolve signed public keys.
pubkey.locker is a curl-friendly keyserver backed by Oracle Autonomous Database. Publish cryptographically signed key bundles, validate ownership proofs, and resolve keys over HTTPS directly into production environments.
Protocol Architecture
End-to-end cryptographic integrity from key generation to server authorization.
Prepare & Sign
Generate Ed25519 or RSA keys locally. Sign an ownership proof challenge containing your target handle.
Verify Schema
Dry-run check against the validation schema to verify fingerprints, signature algorithms, and payload types.
Autonomous Storage
Store verified bundles with ACID transactions in Oracle Autonomous Database 26ai with full encryption.
Resolve over HTTPS
Resolve bundles via curl or integrate directly with OpenSSH AuthorizedKeysCommand in milliseconds.
Platform Capabilities
Engineered for infrastructure automation, developer identity, and zero-trust environments.
Signed Ownership Proofs
Every bundle includes cryptographic signature proofs, preventing handle spoofing and unauthorized overrides.
Oracle 26ai Backbone
Backed by Oracle Autonomous Transaction Processing for high availability, automatic scaling, and fast lookups.
curl-Friendly APIs
Fetch raw authorized_keys text or complete JSON envelopes using standard command-line tools without SDKs.
Pre-Flight Validation
Automated validation endpoints verify key formats (Ed25519, RSA, ECDSA) and signatures before committing to storage.
Token-Secured Administration
Administrative management endpoints protected with secure token authentication for bundle audits and revocations.
Automated TLS Infrastructure
Edge certificates automatically provisioned, validated, and renewed via Caddy reverse proxy on port 3002.