---
title: "Jwks Endpoint"
method: GET
path: "/.well-known/jwks.json"
---

# Jwks Endpoint

`GET /.well-known/jwks.json`

## Request

- Base URL: `https://api.omicos.cn` (the document declares no server; this is the origin it was published from)
- URL: `https://api.omicos.cn/.well-known/jwks.json`
- Auth: none declared

Public key set for verifying plan tokens. **No authentication
required** — this is the whole point of asymmetric signing. The
omicos-admin and omicos-core boot processes hit this once at
startup (and re-fetch on cache expiry, 24h default) to pick up
key rotation without redeployment.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/omicos/apis/omicos-server.md) · [All operations](https://skmtc.dev/omicos/apis/omicos-server/llms.txt) · [OpenAPI document](https://skmtc.dev/omicos/apis/omicos-server/revisions/434cbb0f21f6?raw)