---
title: "Fetch the credential issuer's public keys (JWKS)"
method: GET
path: "/.well-known/jwks.json"
tags: ["Registry"]
---

# Fetch the credential issuer's public keys (JWKS)

`GET /.well-known/jwks.json`

The credential issuer's published public keys as an RFC 7517 JSON Web Key Set — the same rotation set the DID document carries, for verifiers that consume a JWKS directly. Unauthenticated; cacheable for one hour.

## Response `200`

The issuer's published public keys (RFC 7517).

---

[API](https://skmtc.net/baselayer/apis/baselayer-api-service.md) · [All operations](https://skmtc.net/baselayer/apis/baselayer-api-service/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/baselayer/baselayer-api-service/revisions/0cc89938bc26/schema)