How do you know official communication is from Scry?
=====================================================

Scry (https://scry.io) publishes this OpenPGP public key so that
official communication can be verified even if our domains are ever
seized, taken down, or lost.

A statement is official if and only if it carries a valid signature
from this key, or from a successor key attested in a statement signed
by this key.

Do not send us messages encrypted to this key. It is a sign-only key,
and the private key is stored offline, away from our servers, for
emergencies.

Official domains as of 2026-09-04:

  scry.io            (canonical)
  api.scry.io
  exopriors.com

Key fingerprint:

  2F68 CFB1 3EFA AD78 D666 5A80 2C61 DA50 4720 2629

-----BEGIN PGP PUBLIC KEY BLOCK-----

xjMEaoCdsBYJKwYBBAHaRw8BAQdAzo4xUhxOP/wVZM6DO5oKLHw8KO8v4pspTOx6
gmZIPWXCwAsEHxYKAH0FgmqAnbADCwkHCRAsYdpQRyAmKUcUAAAAAAAeACBzYWx0
QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmd+v6YzPjtCO8IKbNosvSupXnDKAZM2
Zw1poQMDoFYhUQMVCggCmwECHgkWIQQvaM+xPvqteNZmWoAsYdpQRyAmKQAAXqIA
/21FR+MS53s5Ke7RR3/D8Ekb+1Hq9U8stnZC27Jer5EQAQDmVpSk5/cRlAo6Cdze
rCE0kT3j7nqrsY+v2d0PcXXTAs0EU2NyecLADgQTFgoAgAWCaoCdsAMLCQcJECxh
2lBHICYpRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+EZ
gCGpSOagHveFXZyqxTg7najwr/VOAF6Fm2IRcm37AxUKCAKZAQKbAQIeCRYhBC9o
z7E++q141mZagCxh2lBHICYpAACRDQEAipsE/CrXbJusPUQIE+/AcWgwN2nz6fbz
cXK6KMWEUrYA/2VLobZUvjv01/TYANzH4boXW5UJ7AHSGAWUXEFFjrwMzjMEaoCd
sBYJKwYBBAHaRw8BAQdA9FXfO/6zHbr+02GbnyMX6y6Guh5shbmtODvBgTiogKnC
wL8EGBYKATEFgmqAnbAJECxh2lBHICYpRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZw1JTSYpjwZDlNAGKO0u0ArVL/2IJK7PI8s9diOMbgK1
ApsCvqAEGRYKAG8FgmqAnbAJEIhxlgJyBG7tRxQAAAAAAB4AIHNhbHRAbm90YXRp
b25zLnNlcXVvaWEtcGdwLm9yZ1ofERpAdFJAxmHMANsadLMuzcsEEHE3KyE03Los
elMLFiEEh+tXiQ1fUn0TRXYOiHGWAnIEbu0AAGs9AQD4yLLBT7DMvBJCr6TJdbt1
7GlO0VkfBKIE1CBQ4SXIPwEA6qiQX6cF9+PJQuk6ivoCW8x/5P4wZPqioZ3ZJs8m
QwYWIQQvaM+xPvqteNZmWoAsYdpQRyAmKQAATDQBAJPrES3wIgfJkTbC9aWlCNWx
qblEszG0Ay8YMIy8wEhAAP9UJio6pgiSBDpHb1Pm8D3p5lt2kaXTFiCKg3ayeCZ+
DA==
=f8AP
-----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Scry signed attestation #2 (2026-09-04)

This statement supersedes and replaces signed attestation #1
(2026-08-15) in full.

The canonical Scry domain is scry.io. Our official domains today are:
scry.io, api.scry.io, exopriors.com. This list is complete: no other
domain is official Scry infrastructure.

Official Scry communication is verifiable with OpenPGP key
2F68 CFB1 3EFA AD78 D666 5A80 2C61 DA50 4720 2629.
Any successor domain or successor key will be announced in a statement
signed by this key (or by a successor key so attested). This file is
served at https://scry.io/pgp.txt; archived copies of that URL in the
Internet Archive's Wayback Machine anchor this chain independently of
our domains.

-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8FgmqbRxAJEIhxlgJyBG7tRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ66mUcX68OlzicO/jOwwJMNkcqapYGDwq7O8SZ456FTB
FiEEh+tXiQ1fUn0TRXYOiHGWAnIEbu0AAJNwAQCvRIomFVILFQR2jpl1+Xmw5gBL
F3npF/QxIQOJldPl5AD/e/Zv8LOVuFbnxxZl0K73sWRIoUyFZS986+/G4xXG9wo=
=dgh5
-----END PGP SIGNATURE-----