---
title: "GET /.well-known/scitt-keys/{kid}"
method: GET
path: "/.well-known/scitt-keys/{kid}"
---

# GET /.well-known/scitt-keys/{kid}

`GET /.well-known/scitt-keys/{kid}`

Get a single service key by kid, per Section 2.2 of draft-ietf-scitt-scrapi-09

## Path parameters

- `kid` string, required

## Query parameters

- `api-version` string, required

## Headers

- `accept` 'application/cbor', required

## Response `200`

Response containing a single COSE_Key (map, not array) in CBOR format

## Other responses

- `400` — Validation error response
- `401` — Unauthorized error response, returned when JWT authentication is required and the request fails authentication.
- `404` — Not found error response
- `429` — Not found error response
- `500` — Server error response
- `503` — Service unavailable error response

---

[API](https://skmtc.net/azure/apis/confidentialledger-microsoft-codetransparency.md) · [All operations](https://skmtc.net/azure/apis/confidentialledger-microsoft-codetransparency/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/confidentialledger-microsoft-codetransparency/revisions/557b89959378/schema)