---
title: "GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json"
method: GET
path: "/v1alpha1/issuer/{commonName}/.well-known/jwks.json"
tags: ["IssuerService"]
---

# GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json

`GET /v1alpha1/issuer/{commonName}/.well-known/jwks.json`

## Request

- Base URL: `http://0.0.0.0:4000`
- URL: `http://0.0.0.0:4000/v1alpha1/issuer/{commonName}/.well-known/jwks.json`
- Auth: none required

Returns the well-known document content for an issuer in
 Json Web Key Set (JWKS) format

## Path parameters

- `commonName` string, required

## Response `200`

OK

- GetIssuerWellKnownResponse: Returns the content of the well-known JWKS document
  - `jwks` Jwks: JWKS represents a set of JSON Web Keys (JWKs).
    - `keys` Jwk[]: Keys represents the list of JSON Web Keys.
      - `alg` string: ALG represents the algorithm intended for use with the key. Example algorithms for Post-Quantum ML-DSA family: "ML-DSA-44", "ML-DSA-65", "ML-DSA-87". Some example algorithms are "RS256", "RS384", "RS512" for RSA algorithms.
      - `kty` string: KTY represents the key type parameter. It specifies the family of quantum algorithms used with the key, such as "AKP" for post quantum algorithms or "RSA" for non quantum algorithms.
      - `use` string: Use represents the intended use of the key. Some example values are "enc" and "sig".
      - `kid` string: KID represents the key ID. It is used to match a specific key.
      - `pub` string: The public key for the AKP kty.
      - `priv` string: The private key for the AKP kty.
      - `seed` string: Seed used to derive keys for ML-DSA alg.
      - `e` string: The exponent for the RSA public key.
      - `n` string: The modulus for the RSA public key.
      - `d` string: The private exponent for the RSA kty.
      - `p` string: The first prime factor for the RSA private key.
      - `q` string: The second prime factor for the RSA private key.
      - `dp` string: The first factor CRT exponent for the RSA private key.
      - `dq` string: The second factor CRT exponent for the RSA private key.
      - `qi` string: The first CRT coefficient for the RSA private key.

## Other responses

- `default`: Default error response

---

[API](https://skmtc.dev/agntcy/apis/identity-node.md) - [All operations](https://skmtc.dev/agntcy/apis/identity-node/llms.txt) - [OpenAPI document](https://skmtc.dev/agntcy/apis/identity-node/revisions/bf6df0a975b1?raw)