---
title: "SD-JWT VC issuer JWKS"
method: GET
path: "/v1/issuers/{slug}/.well-known/jwt-vc-issuer"
tags: ["OpenID4VCI Protocol"]
---

# SD-JWT VC issuer JWKS

`GET /v1/issuers/{slug}/.well-known/jwt-vc-issuer`

Fetch the SD-JWT VC (Selective-Disclosure JWT Verifiable Credential) issuer metadata for a tenant. Wallets and verifiers use the returned JWKS (JSON Web Key Set) to validate credentials signed by this issuer.

## Path parameters

- `slug` string, required

## Response `200`

Didit returned the issuer identifier and signing keys.

- object
  - `issuer` string, uri — Use this issuer identifier to match credentials from this tenant.
  - `jwks` object — Use this JWKS (JSON Web Key Set) to validate credentials signed by the issuer.
    - `keys` object[] — You receive issuer public JWKs (JSON Web Keys).
      - `crv` string — You receive the elliptic curve name for the issuer key.
      - `kid` string — Use this key identifier to select the matching issuer key.
      - `kty` string — You receive the JWK (JSON Web Key) key type.
      - `x` string — You receive the x-coordinate of the issuer public key.
      - `y` string — You receive the y-coordinate of the issuer public key.

## Other responses

- `404` — No tenant exists for the given slug (or it is soft-deleted).

---

[API](https://skmtc.net/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.net/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/revisions/e4eddba66557/schema)