---
title: "Get the scope token public keys"
method: GET
path: "/scope/.well-known/jwks.json"
tags: ["Scope"]
---

# Get the scope token public keys

`GET /scope/.well-known/jwks.json`

## Request

- Base URL: `https://api.nullplatform.com`
- URL: `https://api.nullplatform.com/scope/.well-known/jwks.json`
- Auth: none required

Returns the JSON Web Key Set (JWKS) with the public keys you can use to verify the signature of the `token_for_links` JWT returned in the [scope](/docs/api/scope-read) object. This endpoint is public: it doesn't require authentication.

## Response `200`

The operation was successful.

- object
  - `keys` object[], required: The public keys, in JWK format.
    - `kty` string, required: The key type.
    - `n` string, required: The RSA modulus, Base64url-encoded.
    - `e` string, required: The RSA public exponent, Base64url-encoded.
    - `alg` string, required: The signing algorithm.
    - `use` string, required: The intended use of the key.
    - `kid` string, required: The key ID.

## Other responses

- `4XX`: The request couldn't be processed. For example, a parameter is invalid, the resource doesn't exist, or you don't have permission. The body is a problem details object (RFC 9457).
- `5XX`: Something went wrong on nullplatform's side. The body is a problem details object (RFC 9457).

## Changes

- **2026-10-15** `728d4df70ca1`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/nullplatform/apis/nullplatform-api/changes/scope/.well-known/jwks.json/get.md)

---

[API](https://skmtc.dev/nullplatform/apis/nullplatform-api.md) - [All operations](https://skmtc.dev/nullplatform/apis/nullplatform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/nullplatform/apis/nullplatform-api/revisions/d3f66bc633d4?raw)