---
title: "Use this endpoint to retrieve authorization server public keys"
method: GET
path: "/jwks"
tags: ["JSON Web Keys (JWKS) Endpoint"]
---

# Use this endpoint to retrieve authorization server public keys

`GET /jwks`

Retrieve authorization server public keys used for JWT signing or encryption operations.

## Response `200`

Metadata associated with the given token.

- JwksResponse
  - `keys` object[], required
    - `kty` string, required — The cryptographic algorithm family used with the key, such as "RSA" or "EC"
    - `use` string — The intended use of the public key, such as "sig" (signature) or "enc" (encryption)
    - `key_ops` string[]
    - `alg` string — The algorithm intended for use with the key
    - `kid` string — Key ID that is used to match a specific key
    - `x5u` string — URI that refers to a resource for an X.509 public key certificate or certificate chain
    - `x5c` string[]
    - `x5t` string — Base64url-encoded SHA-1 thumbprint of the DER encoding of an X.509 certificate
    - `x5t#S256` string — Base64url-encoded SHA-256 thumbprint of the DER encoding of an X.509 certificate
    - `crv` 'P-256' | 'P-384' | 'P-521' — Identifies Elliptic Curve cryptographic curve used with the key.
    - `x` string — X coordinate of the Elliptic Curve point. It is represented as the base64url encoding of the octet string representation of the coordinate
    - `y` string — Y coordinate of the Elliptic Curve point. It is represented as the base64url encoding of the octet string representation of the coordinate
    - `e` string — Exponent value for the RSA public key.It is represented as a Base64urlUInt-encoded value.
    - `n` string — Modulus value for the RSA public key. It is represented as a Base64urlUInt-encoded value.

---

[API](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider.md) · [All operations](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ibm/ibm-security-verify-access-oidc-provider/revisions/68cfc4d21b73/schema)