---
title: "Get Signing Keys"
method: GET
path: "/servers/signing-keys"
tags: ["Servers"]
---

# Get Signing Keys

`GET /servers/signing-keys`

Return the signed key bundle used by booting VMs to fetch and verify cosign/Helm keys.

Each entry in 'keys' is a base64-encoded public key; the corresponding entry in
'signatures' is a base64-encoded detached PGP signature produced by the root signing key.
Intentionally public — no mTLS required. Independent third parties and auditors can
fetch these public keys to verify TDX quotes without needing to be a VM client.

## Response `200`

Successful Response

- unknown

## Changes

- **2026-08-26** `8d909638091e` — 1 info
  - endpoint added
- **2026-08-22** `05d9af05d87e` — 1 breaking
  - api path removed without deprecation
- **2026-08-04** `352418d4e3a2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/chutes/apis/fastapi/changes/servers/signing-keys/get.md)

---

[API](https://skmtc.dev/chutes/apis/fastapi.md) · [All operations](https://skmtc.dev/chutes/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/chutes/fastapi/revisions/7be1aa2fe1a0/schema)