---
title: "Get a public encryption key for tokenization"
method: GET
path: "/payment/vault/info"
tags: ["Vault Public Encryption"]
---

# Get a public encryption key for tokenization

`GET /payment/vault/info`

Retrieve a public encryption key and a value to use as JWE kid field, to tokenize payment instruments in the vault.

The key will be valid for a limited duration indicated by the `expiresIn` field in the response.

You should renew the key on your side before it expires, at which point you will need to obtain a new one by making a new request.

## Response `200`

Success.

- object
  - `encryptionPublicKey` string, required — Encryption public key for tokenization.
  - `encryptionKeyId` string, uuid, required — Encryption key ID.
  - `expiresIn` integer, required — Public encryption key expiry time in seconds. eg. public key expires in 3300 seconds.

## Other responses

- `401` — Unauthorized.
- `403` — Insufficient Scope.
- `429` — Too Many Requests.

---

[API](https://skmtc.net/payrails/apis/payrails-api-reference.md) · [All operations](https://skmtc.net/payrails/apis/payrails-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/payrails/payrails-api-reference/revisions/9dd2f0158582/schema)