---
title: "Read Ironfang Finance report signing public keys"
method: GET
path: "/v1/einvoices/reports/keys"
tags: ["reports"]
---

# Read Ironfang Finance report signing public keys

`GET /v1/einvoices/reports/keys`

## Request

- Base URL: `https://api.ironfang.com/finance`
- URL: `https://api.ironfang.com/finance/v1/einvoices/reports/keys`
- Auth: none required

Operator-configured Ed25519 public keys only. Active keys sign new reports;
retired keys verify old reports; revoked keys are refused. An empty list
means no trust keys are configured. Cache lifetime is 300 seconds. Offline
verifiers must obtain this document through an independently trusted channel
and maintain revocation updates. Never trust a key supplied by a report.

## Response `200`

Public report trust metadata.

- ReportKeySet
  - `keys` object[], required
    - `algorithm` 'Ed25519', required
    - `id` string, required
    - `public_key` string, required: Unpadded standard base64 of the 32-byte public key.
    - `status` 'active' | 'retired' | 'revoked', required
  - `schema` 'financewolf/einvoice/report-keys/v1', required

---

[API](https://skmtc.dev/ironfang/apis/ironfang-finance-e-invoicing-api.md) · [All operations](https://skmtc.dev/ironfang/apis/ironfang-finance-e-invoicing-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ironfang/apis/ironfang-finance-e-invoicing-api/revisions/115e20013788?raw)