---
title: "Get JWT verification public key"
method: GET
path: "/v1/auth/jwt-public-key"
tags: ["Authentication"]
---

# Get JWT verification public key

`GET /v1/auth/jwt-public-key`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/jwt-public-key`
- Auth: none required

Returns the Ed25519 public key used to sign JWTs.
Use this to verify tokens independently (e.g. in a TEE proxy or
gateway). No authentication required.

For OIDC-compliant relying parties (Anthropic Workload Identity
Federation, etc.) prefer the JWKS endpoint at
`/.well-known/jwks.json` together with the discovery document
at `/.well-known/openid-configuration` — those advertise both
Ed25519 and RS256 keys keyed by `kid` and survive key rotation.

## Response `200`

JWT public key

- object
  - `alg` string, required
  - `public_key_base64` string, required: Base64-encoded Ed25519 public key

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)