The Java SDK provides typed modules for the public TKeeper API:
- SDK README
- Maven coordinate:
org.exploit:tkeeper-sdk:2.2.0 - Java toolchain: 17 or newer
The SDK follows the same module boundaries as the API: system, DKG, signing, storage/import, quorum promotion, ECIES, compliance, expiration, audit, integrity, consistency, destroy, and control-plane reads.
The wire contract remains ../../openapi.yaml. Treat generated or handwritten SDK helpers as convenience code, not a competing source of truth.
Integration rules
- Use
JwtTokenAuthin production and scope its permissions to the required identities and operations. - Close
TKeeperClientto release its HTTP resources. - Pass
KeySetAuthoritiesexplicitly when creating governed identities; convenience constructors without authorities selectarbitraryraw signing. - Reuse the exact
Commandwhen verifying a returned signature. - Catch
TKeeperExceptionand branch onErrorType, not diagnostic detail text. - Do not retry authorization or policy denials as availability failures.