---
title: "JWKS Pinned-Directory Check"
method: POST
path: "/v1/tools/check_jwks_pinned_directory"
tags: ["rfc9421", "web-bot-auth", "visa-tap", "jwks", "digest-pinning", "agent-identity", "mcp:check_jwks_pinned_directory"]
---

# JWKS Pinned-Directory Check

`POST /v1/tools/check_jwks_pinned_directory`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/check_jwks_pinned_directory`
- Auth: none declared

Confirms a caller-supplied JWKS directory document matches a caller-pinned SHA-256 digest -- sha256(canonicalize(directory_jwks)) === pinned_digest -- before art-130 trusts the document's internal shape. Canonicalization is this codebase's one JCS/RFC-8785 canon (recursive key-sort, array order preserved), hashed as lowercase hex, so two honest callers hashing the same logical document land on the same digest. Zero network, zero key hosting: both the directory document and the pinned digest are supplied by the caller, never fetched, cached, or served by this tool. Chains before art-130 in the visa-tap-agent-verification chain, so a substituted directory fails before its shape is even checked.

**Tool URL:** https://ainumbers.co/chaingraph/art-609-jwks-pinned-directory-check.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `directory_jwks` object, required
  - `pinned_digest` string, required

## Response `200`

Successful tool execution result

- object
  - `computed_digest` string: sha256(canonicalize(directory_jwks)), lowercase hex.
  - `pinned_digest` string, nullable
  - `pinned_digest_well_formed` boolean: True only if pinned_digest is present and matches 64 lowercase-or-mixed-case hex characters.
  - `digest_match` boolean
  - `key_count` number

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)
