webhooks
getPublicKey
Returns the platform-level Ed25519 public key used to verify asymmetric (v1a) webhook signatures. This endpoint is unauthenticated since the public key is not a secret, but the orgId parameter is required to ensure clients retrieve the correct key for their organization in case of key rotation.
get/v1/webhooks/.well-known/public-key
Query parameters
orgIdstring required
Organization ID to retrieve the public key for.
Response
Success - public key returned
Example response
{
"public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA...\n-----END PUBLIC KEY-----\n",
"algorithm": "ed25519",
"issuer": "epilot"
}