---
title: "Get signing keys"
method: GET
path: "/auth/verify_keys"
tags: ["Webhook Subscriptions"]
---

# Get signing keys

`GET /auth/verify_keys`

Returns a list of signing keys used to verify webhooks.

## Response `200`

JWKS signing public keys

- object — Webhooks verification keys.
  - `keys` object[], required — List of verification keys
    - `kid` string, uuid — Key ID
    - `kty` 'EC' — Cryptographic algorithm family used with the key. * EC -
    - `crv` 'P-521' — Elliptic curve family. * P-521 -
    - `x` string — Curve parameter
    - `y` string — Curve parameter

## Other responses

- `401` — Unauthorized. The caller has not been authenticated.
- `403` — Forbidden. The caller has been authenticated but is not allowed to take the requested action.
- `406` — Not Acceptable. The resource does not have a current representation that would be acceptable to the user agent. "Accept" header defined unsupported value.
- `429` — Too Many Requests. The caller has exceeded their quota for the time period and has been throttled.
- `500` — Internal Server Error. The service encountered an unexpected error.
- `503` — Service Unavailable. The service handling for this request cannot be reached at this time.
- `504` — Gateway Timeout. The service gateway has reached its internal timeout.

---

[API](https://skmtc.net/upvest/apis/upvest-investment-api.md) · [All operations](https://skmtc.net/upvest/apis/upvest-investment-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/upvest/upvest-investment-api/revisions/2c6bc192bc09/schema)