---
title: "/.well-known/jwks.json"
method: GET
path: "/.well-known/jwks.json"
tags: ["Well-Known"]
---

# /.well-known/jwks.json

`GET /.well-known/jwks.json`

Returns the JSON Web Key Set (JWKS) containing public keys used to verify JWT tokens issued by Archera. This endpoint follows the RFC 7517 standard for JWK and is used by clients to validate JWT signatures. No authentication is required as this endpoint provides public cryptographic keys.

## Response `200`

OK

- JWKS
  - `keys` JWK[], required — Array of JSON Web Keys
    - `kty` string, required — Key type (e.g., 'RSA')
    - `use` string, required — Public key use (e.g., 'sig' for signature)
    - `kid` string, required — Key ID for identifying the key
    - `alg` string, required — Algorithm (e.g., 'RS256')
    - `n` string, required — RSA modulus (base64url encoded)
    - `e` string, required — RSA public exponent (base64url encoded)

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `405` — Method not allowed
- `409` — Conflict
- `500` — Failed to load keys
- `default` — Default error response

---

[API](https://skmtc.net/archera/apis/archera-ai-api.md) · [All operations](https://skmtc.net/archera/apis/archera-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/archera/archera-ai-api/revisions/ed4f8fa35f31/schema)