---
title: "RFC 8615 key discovery"
method: GET
path: "/.well-known/oracle-keys.json"
---

# RFC 8615 key discovery

`GET /.well-known/oracle-keys.json`

## Request

- Base URL: `https://headlessoracle.com`
- URL: `https://headlessoracle.com/.well-known/oracle-keys.json`
- Auth: none declared

Standard well-known URI for Ed25519 public key discovery (RFC 8615). Returns active signing key(s) with lifecycle metadata. The hex `public_key` field is the source of truth for deployed SDKs (@headlessoracle/verify, headless-oracle). `jwks_uri` points at the RFC 7517 JWKS form for JOSE-aware verifiers. No authentication required. Use /v5/keys for the full canonical payload specification.

## Response `200`

Active signing key(s)

- object

---

[API](https://skmtc.dev/headlessoracle/apis/headless-oracle.md) · [All operations](https://skmtc.dev/headlessoracle/apis/headless-oracle/llms.txt) · [OpenAPI document](https://skmtc.dev/headlessoracle/apis/headless-oracle/revisions/4e82fe332f29?raw)
