Encrypt data (JWE).

post

https://staging.ankatech.co/api/v3/crypto/encrypt

Encrypts Base64‑encoded data using the public key associated
with kid.
Supported algorithms: ML‑KEM (KEM), RSA, ECC (ECIES).

Output: a typed JWE General JSON Serialization (RFC 7516 §7.2)
payload — uniform shape across SIMPLE single-recipient keys and
COMPOSITE hybrid multi-recipient keys.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

Language

Credentials

Bearer

JWT

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200Encryption successful

400Bad Request: • Input is not valid Base64, OR • Key does not support the requested operation (e.g., trying to encrypt with a sign-only key)

401Unauthorized: missing or invalid JWT token

404Not Found: specified key does not exist or lacks a public component

409Conflict: the key is in an invalid state (e.g. suspended or revoked), or the tenant key-protection backend is not configured. Both are durable - do not retry.

413Payload Too Large: plaintext exceeds the configured maximum size (see GET /api/v3/crypto/limits)

500Internal Server Error: unexpected error during encryption

503Service Unavailable: the tenant's key-protection backend is bound but not currently usable. Transient - retry after the Retry-After interval. The body is oracle-safe and names no backend, token, slot, PIN or vendor.