---
title: "OHTTP gateway key config"
method: GET
path: "/api/ohttp/keys"
tags: ["privacy"]
---

# OHTTP gateway key config

`GET /api/ohttp/keys`

## Request

- Base URL: `https://api.anygas.xyz/svc`
- URL: `https://api.anygas.xyz/svc/api/ohttp/keys`
- Auth: none declared

HPKE public key configuration for Oblivious HTTP. Fetch this, encapsulate your request to the returned publicKey, then POST the sealed bytes to the RELAY at https://relay.nightferry.net/relay — not to this host. Suite: DHKEM(X25519,HKDF-SHA256)/HKDF-SHA256/AES-128-GCM. Response encryption uses the HPKE export secret with info "robyn-ohttp-response-v1"; the response is 12-byte nonce || ciphertext || 16-byte GCM tag under AES-256-GCM. NOTE: this wire format is the OHTTP architecture, not RFC 9458 byte-compatible — the inner message is JSON, not RFC 9292 BHTTP.

## Response `200`

Key configuration

- object
  - `keyId` string
  - `kem` string
  - `kdf` string
  - `aead` string
  - `publicKey` string: base64 X25519 public key
  - `wireFormat` string

---

[API](https://skmtc.dev/anygas/apis/robyn-anygas-api.md) · [All operations](https://skmtc.dev/anygas/apis/robyn-anygas-api/llms.txt) · [OpenAPI document](https://skmtc.dev/anygas/apis/robyn-anygas-api/revisions/9b7498be8304?raw)