---
title: "JSON Web Key Set"
method: GET
path: "/.well-known/jwks.json"
tags: ["Authentication"]
---

# JSON Web Key Set

`GET /.well-known/jwks.json`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/.well-known/jwks.json`
- Auth: none required

Public keys for every active version of every JWT signing
key (Ed25519 + RSA-2048). Each entry includes a `kid` so
consumers can validate tokens issued before the most recent
key rotation. Cached for 5 minutes via `Cache-Control` and
CORS-permissive for browser-based IdP consoles.

## Response `200`

JWK Set

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)