---
title: "GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json"
method: GET
path: "/v1alpha1/issuer/{commonName}/.well-known/jwks.json"
tags: ["IssuerService"]
---

# GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json

`GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json`

Returns the well-known document content for an issuer in
 Json Web Key Set (JWKS) format

## Path parameters

- `commonName` string, required

## Response `200`

OK

- GetIssuerWellKnownResponse — Returns the content of the well-known JWKS document
  - `jwks` Jwks — JWKS represents a set of JSON Web Keys (JWKs).
    - `keys` Jwk[] — Keys represents the list of JSON Web Keys.
      - `alg` string — ALG represents the algorithm intended for use with the key. Example algorithms for Post-Quantum ML-DSA family: "ML-DSA-44", "ML-DSA-65", "ML-DSA-87". Some example algorithms are "RS256", "RS384", "RS512" for RSA algorithms.
      - `kty` string — KTY represents the key type parameter. It specifies the family of quantum algorithms used with the key, such as "AKP" for post quantum algorithms or "RSA" for non quantum algorithms.
      - `use` string — Use represents the intended use of the key. Some example values are "enc" and "sig".
      - `kid` string — KID represents the key ID. It is used to match a specific key.
      - `pub` string — The public key for the AKP kty.
      - `priv` string — The private key for the AKP kty.
      - `seed` string — Seed used to derive keys for ML-DSA alg.
      - `e` string — The exponent for the RSA public key.
      - `n` string — The modulus for the RSA public key.
      - `d` string — The private exponent for the RSA kty.
      - `p` string — The first prime factor for the RSA private key.
      - `q` string — The second prime factor for the RSA private key.
      - `dp` string — The first factor CRT exponent for the RSA private key.
      - `dq` string — The second factor CRT exponent for the RSA private key.
      - `qi` string — The first CRT coefficient for the RSA private key.

## Other responses

- `default` — Default error response

---

[API](https://skmtc.net/agntcy/apis/identity-node.md) · [All operations](https://skmtc.net/agntcy/apis/identity-node/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/agntcy/identity-node/revisions/bf6df0a975b1/schema)