---
title: "GET /.well-known/scitt-keys"
method: GET
path: "/.well-known/scitt-keys"
---

# GET /.well-known/scitt-keys

`GET /.well-known/scitt-keys`

List all service keys in COSE_Key_Set format, per Section 2.1 of draft-ietf-scitt-scrapi-09

## Query parameters

- `api-version` string, required

## Headers

- `accept` 'application/cbor', required

## Response `200`

Response containing COSE_Key_Set (array of COSE_Key maps) in CBOR format

## Other responses

- `400` — Validation error response
- `401` — Unauthorized error response, returned when JWT authentication is required and the request fails authentication.
- `404` — Not found error response
- `429` — Not found error response
- `500` — Server error response
- `503` — Service unavailable error response

---

[API](https://skmtc.net/azure/apis/confidentialledger-microsoft-codetransparency.md) · [All operations](https://skmtc.net/azure/apis/confidentialledger-microsoft-codetransparency/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/confidentialledger-microsoft-codetransparency/revisions/557b89959378/schema)