---
title: "The keys evidence is signed with"
method: GET
path: "/v1/evidence/keys"
tags: ["Evidence"]
---

# The keys evidence is signed with

`GET /v1/evidence/keys`

## Request

- Base URL: `https://api.ironfang.com/rig`
- URL: `https://api.ironfang.com/rig/v1/evidence/keys`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

The public keys bundles and receipts are signed with, by key id, so a verifier can trust a signature by key rather than by the key it carries. Empty on a platform that signs nothing. Needs rig.read.

## Response `200`

The keys.

- object
  - `keys` PublicKey[], required
    - `algorithm` 'ed25519', required
    - `key_id` string, required: The first 16 hex characters of the key's SHA-256.
    - `public_key` string, required: Base64.

## Other responses

- `401`: No credential, an invalid one, or a delegated token where none is accepted (`unauthorized`, `invalid_api_key`, `delegated_not_allowed`).
- `403`: The credential lacks the permission or scope, or names another organisation (`forbidden`, `insufficient_scope`).

---

[API](https://skmtc.dev/ironfang/apis/ironfang-rig-api.md) · [All operations](https://skmtc.dev/ironfang/apis/ironfang-rig-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ironfang/apis/ironfang-rig-api/revisions/3e86a312dad1?raw)