Governance

Public JWKS of attestation signing keys

Returns the JSON Web Key Set (RFC 7517) of the public Ed25519 attestation keys. PUBLIC — no authentication required. Anyone (including the client's own regulator) can fetch these keys to verify a signed attestation offline, with no Nexus account and no shared secret. The private key never leaves the server. Cached 5 minutes.

Includes ALL historical public keys (no 7-day expiry) so offline verification of old attestations works indefinitely.

get/api/v1/attestations/keys

Request

  • Base URL: https://legal.nexusquantum.legal
  • URL: https://legal.nexusquantum.legal/api/v1/attestations/keys
  • Auth: none required

Response

JWKS of ALL public keys — active plus every rotated-out historical key (no expiry), so old attestations remain verifiable indefinitely.

Example response

{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "alg": "EdDSA",
      "kid": "att_20260712_a"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.