usb token rest api 3
https://kilo-wiki.win/index.php/Why_the_Digital_Signature_USB_Token_Still_Matters_for_Remote_Signing
A USB token REST API lets your backend talk to a physical key plugged into a machine, turning it into a signing or auth endpoint. You send JSON requests to unlock, sign, or verify, and the token's private key never leaves the device. It's handy for secure CI/CD or anywhere you need hardware-backed crypto without building a custom driver.