v5
latestOpenAPI 3.1.02026-07-262421791.5 MBGet Wise JOSE public key
Returns a public key issued by Wise.
Depending on the scope requested, the key will be used for verifying HTTP responses signed by Wise or for for encrypting the payload prior to sending it to Wise.
For both signature verification and payload encryption, the process involves storing this public key after retrieval. In both cases, the stored public key should be used without calling this endpoint.
If verification of the signed request fails or Wise is unable to decrypt your request payload, call this API to issue a fresh key from Wise and reattempt the operation again.
{% admonition type="warning" %} This endpoint requires a client credentials token, not a user level access token. Make sure you use your client details to fetch a valid client credentials token before performing this call. {% /admonition %}
Query parameters
Fetch a specific public key version. If omitted the most recent public key is provided.
Algorithm to be used for signature verification or payload encryption. This must match the algorithm used during request.
- Signature verification (Scope: PAYLOAD_SIGNING): ES256, ES384, ES512, PS256, PS384, PS512
- Payload encryption (Scope: PAYLOAD_ENCRYPTION): RSA_OAEP_256
Scope of the key. Must be PAYLOAD_SIGNING or PAYLOAD_ENCRYPTION.
Headers
Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.
Response
Public key object.