Java SDK

The Java SDK provides typed modules for the public TKeeper API:

  • SDK README
  • Maven coordinate: org.exploit:tkeeper-sdk:2.2.0
  • Java toolchain: 17 or newer

The SDK follows the same module boundaries as the API: system, DKG, signing, storage/import, quorum promotion, ECIES, compliance, expiration, audit, integrity, consistency, destroy, and control-plane reads.

The wire contract remains ../../openapi.yaml. Treat generated or handwritten SDK helpers as convenience code, not a competing source of truth.

Integration rules

  • Use JwtTokenAuth in production and scope its permissions to the required identities and operations.
  • Close TKeeperClient to release its HTTP resources.
  • Pass KeySetAuthorities explicitly when creating governed identities; convenience constructors without authorities select arbitrary raw signing.
  • Reuse the exact Command when verifying a returned signature.
  • Catch TKeeperException and branch on ErrorType, not diagnostic detail text.
  • Do not retry authorization or policy denials as availability failures.