Skip to main content

Public keys for participant tokens (JWKS)

GET 
/api/.well-known/jwks.json

The Ed25519 public keys that participant tokens are signed with, as a JWKS document. Public, unauthenticated and cacheable — match a token's kid header against keys[].kid to verify it without calling Cortex. Every key that still verifies is listed, so a key rotation needs no coordination with verifiers.

Request​

Responses​

The key set (empty when this deployment issues no participant tokens)