DPP Service Validator · OwnYourData

All services

OPC UA Cloud Library

Entry from our research · information as of 2026-10-18

Operator
OPC Foundation
Web page
https://uacloudlibrary.opcfoundation.org
Source code
https://github.com/OPCFoundation/UA-CloudLibrary
Licence
OPC Foundation MIT License 1.00
API base
https://uacloudlibrary.opcfoundation.org/v1
Checks
2 of 2 passed · 1 warning · read-only, weekly
Listed since
2026-10-18
Entry
services/opc-ua-cloud-library.yaml

Global instance whose read paths answer without login. No passport ID is publicly known, so checks that need a test passport are skipped. Feature flags as described in the documentation of the repository.

This list is part of a research project and shares what we currently know. It makes no claim to be complete and is not a legal assessment. Entries from our research come from public information and may be incomplete or out of date. The operator can correct or take over this entry, or ask for its removal: how to add or correct a service.

Example passports · dpplint

No public example passport.

Service checks · dpp-validator

Run 2026-10-18T21:03:51Z · dpp-criteria 08ee851 · JSON

2 of 2 automated checks passed (0 failed, 1 with warnings, 13 skipped: 3 not sent (read-only run), 10 not evaluated) · read-only run
Proposed criteria, not counted: 0 of 0 automated checks passed
CriterionRequirement and findingsLevelResult
DPP-API-022 v1 Unknown passport ID is answered with 404
  • warning: step 1 (GET /dpps/{randomId}): $.message selects nothing, expected a value
 MUSTwarning
DPP-DEX-003 v1 TLS 1.2 or higher, older versions refused MUSTpassed
DPP-API-007 v2 Errors use the EN 18222 status codes
  • read-only run: not sent, the criterion needs step 1 POST /dppsByProductIds, step 2 POST /dppsByProductIds
 MUSTskipped
not sent (read-only run)
DPP-API-013 v1 Lifecycle API provides ReadDPPById
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-API-014 v1 Lifecycle API provides ReadDPPByProductId
  • no value for {productId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-API-015 v1 Lifecycle API provides ReadDPPIdsByProductIds
  • read-only run: not sent, the criterion needs step 1 POST /dppsByProductIds
 MUSTskipped
not sent (read-only run)
DPP-API-019 v1 Lifecycle API provides ReadDPPVersionByIdAndDate
  • no value for {dppId} in the test_data of the service
 SHOULDskipped
not evaluated
DPP-API-020 v1 API paths carry the version prefix v1/
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-API-021 v2 elementIdPath uses RFC 9535 JSONPath
  • no value for {dppId}, {elementIdPath} in the test_data of the service
 MUSTskipped
not evaluated
DPP-API-023 v1 API honours the representation query flag
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-DEX-002 v1 HTTPS with a valid certificate
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-DEX-004 v1 API responses are JSON
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-DEX-005 v1 HTTP/2 is supported
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-DEX-006 v1 HTTP versions below HTTP/2 are not used
  • no value for {dppId} in the test_data of the service
 MUSTskipped
not evaluated
DPP-SEC-001 v3 Passport cannot be changed without authorisation
  • read-only run: not sent, the criterion needs step 2 PATCH /dpps/{dppId}, step 3 POST /dpps
 MUSTskipped
not sent (read-only run)
DPP-ACC-003 v1 Controlled data elements are delivered per role (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-006 v1 Controlled data elements are not delivered without authorisation (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-008 v1 Access policy defines element-level rights, granting and revocation (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-012 v1 Fine-granular read of a controlled element without credentials is refused (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-014 v1 Access to controlled data is logged tamper-evidently (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-API-016 v1 Lifecycle API provides UpdateDPPById (proposed, not counted)
  • the service does not declare write-api
 MUSTskipped
not applicable
DPP-BAT-004 v2 Battery passport releases Annex XIII point 3 data only to authorities (proposed, not counted)
  • the service does not declare battery, access-levels
 MUSTskipped
not applicable
DPP-OPS-006 v1 Separate test and production environments (proposed, not counted)
  • self-declared criterion: declarations are not evaluated in this version and never count as passed
 SHOULDskipped
not evaluated
DPP-STO-017 v1 Archived versions keep the access restrictions (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable

Results of automated checks only. They are no certification and establish no presumption of conformity.