---
title: "Get Wise JOSE public key"
method: GET
path: "/v1/auth/jose/response/public-keys"
tags: ["jose"]
---

# Get Wise JOSE public key

`GET /v1/auth/jose/response/public-keys`

Returns a public key issued by Wise.

Depending on the scope requested, the key will be used for verifying HTTP responses signed by Wise or for for encrypting the payload prior to sending it to Wise.

For both signature verification and payload encryption, the process involves storing this public key after retrieval. In both cases, the stored public key should be used without calling this endpoint.

If verification of the signed request fails or Wise is unable to decrypt your request payload, call this API to issue a fresh key from Wise and reattempt the operation again.

{% admonition type="warning" %}
  This endpoint requires a client credentials token, not a user level access token. Make sure you use your client details to fetch a valid [client credentials token](/api-reference/oauth-token/oauthtokencreate) before performing this call.
{% /admonition %}

## Query parameters

- `version` integer
- `algorithm` 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512' | 'RSA_OAEP_256', required
- `scope` 'PAYLOAD_SIGNING' | 'PAYLOAD_ENCRYPTION', required

## Headers

- `X-External-Correlation-Id` string, uuid

## Response `200`

Public key object.

- object
  - `keyId` string, UUID — ID of the key in UUID format.
  - `version` integer — Version of the public key issued.
  - `keyMaterial` object
    - `algorithm` 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512' | 'RSA_OAEP_256' — Algorithm to be used with the key.
    - `keyMaterial` string — Public key material.
  - `scope` 'PAYLOAD_SIGNING' | 'PAYLOAD_ENCRYPTION' — Scope of the key.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)