matrixtool notary - Fetch a server's signing key via another server
$ matrixtool notary my-server.org matrix.org
This command uses the notary federation API to fetch the keys from a Matrix homeserver (the "target") by querying via another server (the "notary"). This helps you test whether a given server can see the one you are testing.
There are no additional options for this command.
For example, once you believe your server is working correctly according to
matrixtool server-key you can query the matrix.org server to see if that can fetch the same keys:
$ matrixtool notary example.com matrix.org [INFO] Connected to 220.127.116.11:8448 Keys from example.com via notary matrix.org Key id ed25519:auto base64::aBcDeFgHiJ... [OK] Verified using server_name=matrix.org key_id=ed25519:auto [OK] Verified using server_name=example.com key_id=ed25519:auto [INFO] Matches cached key
Paul Evans <firstname.lastname@example.org>