{"authentication":{"client_certificate_note":"Bearer API secret бүх RP-д заавал; client certificate зөвхөн require_mtls гэж бүртгэгдсэн RP-д (Bearer-ийн нэмэлт) заавал. / Bearer API secret is required for every RP; a client certificate is required only for RPs registered with require_mtls, in addition to Bearer.","client_certificate_required":true,"client_certificate_scope":"per_rp","methods":["Authorization: Bearer \u003capi_secret\u003e (SHA-256 hash-аар RP resolve) — бүх дуудлагад заавал","mTLS client certificate — require_mtls RP-д Bearer-ийн НЭМЭЛТ (subject нь тухайн RP-тэй таарна); дангаараа RP-г танихгүй"],"note":"RP-г оператор урьдчилан бүртгэнэ (UUID + API secret + IP allowlist + эрх). Дуудлага бүрд relyingPartyUUID/relyingPartyName-ийг body-д өгнө; prod-д Bearer secret заавал, mTLS заавал гэж бүртгэгдсэн RP-д client cert subject нь тухайн RP-тэй таарах ёстой.","relying_party_registry":true,"request_identification":["relyingPartyUUID","relyingPartyName"],"rp_auth_required":true,"transport":"Bearer API secret заавал; mTLS заавал гэж бүртгэгдсэн RP-д TLS client certificate нэмэлтээр"},"capabilities":{"acsp_scheme_name":"smart-id","certificate_levels":["ADVANCED","QUALIFIED","QSCD"],"hash_algorithms":["SHA-256","SHA-384","SHA-512"],"interaction_types":["displayTextAndPIN","confirmationMessage","confirmationMessageAndVerificationCodeChoice"],"signature_algorithms":["rsassa-pss","sha256WithRSAEncryption","sha384WithRSAEncryption","sha512WithRSAEncryption"],"signature_protocols":["ACSP_V2","RAW_DIGEST_SIGNATURE"]},"description":"eID Mongolia Relying Party API — SplitKey RSA (Smart-ID нийцтэй) гар утасны нэвтрэлт ба qualified цахим гарын үсэг (Smart-ID v3 нийцтэй wire protocol).","documentation":"https://developer.eidmongolia.mn/","endpoints":{"authentication":{"device_link_anonymous":"POST https://rp.eidmongolia.mn/authentication/device-link/anonymous","device_link_document":"POST https://rp.eidmongolia.mn/authentication/device-link/document/{documentNumber}","device_link_etsi":"POST https://rp.eidmongolia.mn/authentication/device-link/etsi/{semanticsIdentifier}","notification_document":"POST https://rp.eidmongolia.mn/authentication/notification/document/{documentNumber}","notification_etsi":"POST https://rp.eidmongolia.mn/authentication/notification/etsi/{semanticsIdentifier}"},"crl":"http://crl.eidmongolia.mn/crl","crl_ca":"http://crl.eidmongolia.mn/crl/ca","crl_org":"http://crl.eidmongolia.mn/crl/org","ocsp":"http://ocsp.eidmongolia.mn/ocsp","organization":{"representations":"GET https://rp.eidmongolia.mn/organization/representations/etsi/{personEtsi} — тухайн хүний төлөөлж чадах ACTIVE байгууллагууд (Эстонийн äriregister загвар)"},"pdf":{"signatures":"POST https://rp.eidmongolia.mn/pdf/signatures — CMS бүртгэл {docID, revIndex, medium, sessionID?, cms, fileName, inSha256, pageSha256?, sigRevSha256, outSha256, priorCmsSha256?, priorRevisionSha256?, onBehalfOf?, signerEtsi?}; SIGN эрх"},"person":{"activity":"GET https://rp.eidmongolia.mn/rp/activity/etsi/{personEtsi} — RP-scoped; eID portal (EID_PORTAL_RP_ID): full history (PKI_READ permission)","certificates":"GET https://rp.eidmongolia.mn/certificates/etsi/{personEtsi} (PKI_READ permission)","children":"GET https://rp.eidmongolia.mn/person/children/etsi/{personEtsi} (PKI_READ permission)","devices":"GET https://rp.eidmongolia.mn/devices/etsi/{personEtsi} (PKI_READ permission)","note":"PKI_READ: зөвхөн танай RP-д сүүлийн 24 цагт амжилттай нэвтэрсэн иргэн; бусад → 403","summary":"GET https://rp.eidmongolia.mn/person/summary/etsi/{personEtsi} — dashboard тоо (PKI_READ permission)"},"public":{"rp_application":"POST https://ca.eidmongolia.mn/v3/rp-applications","validate_certificate":"POST https://ca.eidmongolia.mn/v3/validate/certificate","validate_pdf":"POST https://ca.eidmongolia.mn/v3/validate/pdf","verify":"GET https://ca.eidmongolia.mn/v3/verify/{sessionID}","verify_document":"GET https://ca.eidmongolia.mn/v3/verify/doc/{docID|sessionID}"},"seal":{"certificate_get":"GET https://rp.eidmongolia.mn/seal/certificate/{orgEtsi}","certificate_issue":"POST https://rp.eidmongolia.mn/seal/certificate/{orgEtsi} (SEAL permission)","seal":"POST https://rp.eidmongolia.mn/seal/{orgEtsi} — digest тамгалах (интерактив биш e-Seal)"},"session":"GET https://rp.eidmongolia.mn/session/{sessionId}?timeoutMs=… (long-poll, дээд 120000мс)","share":"POST https://rp.eidmongolia.mn/share — multipart {file, filename?, to (1–5), subject?, message?, lang?}; SIGN эрх; зөвхөн eID-ийн хүчинтэй гарын үсэгтэй файл","signature":{"certificate":"POST https://rp.eidmongolia.mn/signature/certificate/{documentNumber}","certificate_choice_device_link_anonymous":"POST https://rp.eidmongolia.mn/signature/certificate-choice/device-link/anonymous — гэрчилгээ сонгуулах (нэвтрэлт БИШ: signature байхгүй)","certificate_choice_notification_etsi":"POST https://rp.eidmongolia.mn/signature/certificate-choice/notification/etsi/{semanticsIdentifier}","device_link_document":"POST https://rp.eidmongolia.mn/signature/device-link/document/{documentNumber}","device_link_etsi":"POST https://rp.eidmongolia.mn/signature/device-link/etsi/{semanticsIdentifier}","notification_document":"POST https://rp.eidmongolia.mn/signature/notification/document/{documentNumber}","notification_etsi":"POST https://rp.eidmongolia.mn/signature/notification/etsi/{semanticsIdentifier}","notification_linked":"POST https://rp.eidmongolia.mn/signature/notification/linked/{documentNumber}"},"token":{"auth_challenge":"POST https://rp.eidmongolia.mn/token/auth/challenge — нэг удаагийн challenge (2 мин) + rpUUID; AUTH эрх","auth_verify":"POST https://rp.eidmongolia.mn/token/auth/verify — {challengeId, certificate, signature} → иргэний identity; AUTH эрх","certificate_issue":"POST https://rp.eidmongolia.mn/token/certificate — USB токены AUTH + SIGN гэрчилгээ (csrAuth, csrSign, onBehalfOf? — хоосон = хувийн токен); TOKEN_ISSUE эрх","certificate_result":"GET https://rp.eidmongolia.mn/token/certificate/{sessionID} — олгосон гэрчилгээ + гинж (зөвхөн үүсгэсэн RP, 24 цаг)"},"tsa":"https://tsa.timeserver.mn/"},"issuer":"https://ca.eidmongolia.mn","kyc":{"liveness":true,"provider":"dan"},"pdfSigning":{"clientSide":{"maxInputBytes":10223616,"maxOutputBytes":10485760,"placeholderBytes":28672,"register":"https://rp.eidmongolia.mn/pdf/signatures","tsa":"https://tsa.timeserver.mn/"},"enabled":true,"onBehalfOf":true,"registerErrorCodes":["REQUEST_TOO_LARGE","REQUEST_INVALID","RATE_LIMITED","STATE_UNAVAILABLE","CMS_INVALID","SIGNER_MISMATCH","SIGNER_CERT_INVALID","SIGNATURE_INVALID","TOKEN_CERT_INVALID","TOKEN_ORG_MISMATCH","SESSION_MISMATCH","SESSION_NOT_COMPLETE","SESSION_FAILED","CLAIMED_ROLE_MISMATCH","REPRESENTATION_REVOKED","TIMESTAMP_INVALID","DOC_ID_CONFLICT","REGISTRY_CONFLICT","DOC_NOT_FOUND","PRIOR_MISMATCH"],"signatureLevel":"PAdES-BASELINE-LT"},"registration":{"apply":"https://ca.eidmongolia.mn/v3/rp-applications","contact":"eIDsupport@gerege.com","how":"RP-ийн өргөдлийг API-аар (POST https://ca.eidmongolia.mn/v3/rp-applications: байгууллага, холбоо барих, зорилго) эсвэл developer.eidmongolia.mn-ээр илгээнэ; eID Mongolia оператор баталж relyingPartyUUID, API secret, IP allowlist, mTLS client-cert subject (prod-д), эрхүүдийг олгоно."},"rp_api_base":"https://rp.eidmongolia.mn","service":"eID Mongolia","sessionTtl":{"auth":300,"sign":600},"share":{"enabled":true,"endpoint":"https://rp.eidmongolia.mn/share","formats":[{"extension":".pdf","mime":"application/pdf","name":"pdf"}],"languages":["mn","en"],"maxFileBytes":3080192,"maxFilenameChars":120,"maxMessageChars":1000,"maxRecipients":5,"maxSubjectChars":150,"permission":"SIGN","quota":{"perRPDay":3000,"perRPHour":300,"perRecipientDay":10},"requiresValidSignature":true},"subject_identifiers":{"civilId":"Иргэний үнэмлэхний дугаар","documentNumber":"Төхөөрөмж бүрийн UUID (enrollment-д буцаана)","registrationNumber":"Монгол РД (push lookup-д resolve хийгдэнэ)","semanticsIdentifier":"ETSI EN 319 412-1: PNOMN-\u003ccivil_id\u003e (хувь хүн) / NTRMN-\u003creg\u003e (байгууллага)"},"tokenCertificate":{"appTransaction":"optional","certificateLevel":"ADVANCED","dryRun":true,"enabled":true,"issue":"https://rp.eidmongolia.mn/token/certificate","keyAlgorithm":"EC P-256 (ecdsa-with-SHA256)","onBehalfOf":"optional","permission":"TOKEN_ISSUE","personalAutoSupersede":true,"result":"https://rp.eidmongolia.mn/token/certificate/{sessionID}","scopeLockedOnRenewal":true},"version":"v3"}