---
title: "Read a public key used to verify sandbox signatures."
method: GET
path: "/api/keys/sandbox/{purpose}/{keyId}"
tags: ["Agent Docs"]
---

# Read a public key used to verify sandbox signatures.

`GET /api/keys/sandbox/{purpose}/{keyId}`

## Request

- Base URL: `https://huggingbay.xyz`
- URL: `https://huggingbay.xyz/api/keys/sandbox/{purpose}/{keyId}`
- Auth: none required

Key lookup does not establish that a receipt is current, reviewed or allowed for a decision. Verify the signature and its recorded scope separately.

**Inputs.** Path, query and header fields are listed below. No request body is required.

**Outputs.** See each status below for its media type, schema and headers. A missing record or unavailable capability is not a successful empty result.

**Errors.** API JSON failures use the documented response schema. Read code, message and next; retry only when the response allows it. Auth, invalid input and missing records need a caller change.

**Rate limits.** Public read budgets apply by client IP and route group. This operation can have a smaller route-specific budget. Read Retry-After on 429 or retryable 503 responses.

**Example setup.** Use an identifier returned by the matching list, search or create operation. Sample identifiers are not a promise that a record exists.

## Path parameters

- `purpose` 'runner-attestation' | 'receipt-signing', required
- `keyId` string, required

## Response `200`

Read a public key used to verify sandbox signatures.

- object
  - `schema` 'hugging-bay.sandbox-signing-public-key.v1', required
  - `role` string, required
  - `key_id` string, required
  - `origin` string, required
  - `public_key_url` string, required
  - `algorithm` string, required
  - `public_key_pem` string, required
  - `status` string, required

## Other responses

- `404`: No visible public record has this identifier.
- `429`: Request budget exceeded. Wait for Retry-After.
- `503`: Current evidence is unavailable.

---

[API](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api.md) · [All operations](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api/revisions/ea7ba26b1e27?raw)