---
title: "Create a signing key"
method: POST
path: "/system/v1/signing-keys"
tags: ["Signing Keys"]
---

# Create a signing key

`POST /system/v1/signing-keys`

Creates a new signing key pair. When creating a new signing key, the API will generate a 2048-bit RSA key-pair and return the private key and a generated key-id; the public key will be stored at Mux to validate signed tokens.

## Response `201`

Created

- SigningKeyResponse
  - `data` SigningKey, required
    - `id` string, required — Unique identifier for the Signing Key.
    - `created_at` string, int64, required — Time at which the object was created. Measured in seconds since the Unix epoch.
    - `private_key` string, byte — A Base64 encoded private key that can be used with the RS256 algorithm when creating a [JWT](https://jwt.io/). **Note that this value is only returned once when creating a URL signing key.**

## Changes

- **2025-08-05** `ba7ebfd893a1` — 1 info
  - the endpoint scheme security `authorizationToken` was added to the API
- **2025-07-02** `d4d7fca3b738` — 1 info
  - the endpoint scheme security `accessToken` was added to the API

[Change history](https://skmtc.dev/muxinc/apis/mux-api/changes/system/v1/signing-keys/post.md)

---

[API](https://skmtc.dev/muxinc/apis/mux-api.md) · [All operations](https://skmtc.dev/muxinc/apis/mux-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/muxinc/mux-api/revisions/34a65dce0f31/schema)