---
title: "List Client Authentication External JWT"
method: GET
path: "/external-jwt-signers"
tags: ["External JWT Signer"]
---

# List Client Authentication External JWT

`GET /external-jwt-signers`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/external-jwt-signers`
- Auth: none declared
- TypeScript: <https://skmtc.dev/openziti/apis/ziti-edge-client/docs/external-jwt-signers/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a list of external JWT signers for authentication

## Query parameters

- `limit` integer
- `offset` integer
- `filter` string

## Response `200`

A list of External JWT Signers

- ListClientExternalJwtSignersEnvelope
  - `data` ClientExternalJwtSignerDetail[], required: An array of External JWT Signers resources
    - `_links` object, required: A map of named links
    - `createdAt` string, date-time, required
    - `id` string, required
    - `tags` Tags
    - `updatedAt` string, date-time, required
    - `audience` string, nullable
    - `clientId` string, nullable
    - `enrollToCertEnabled` boolean
    - `enrollToTokenEnabled` boolean
    - `externalAuthUrl` string, url, required
    - `name` string, required
    - `openIdConfigurationUrl` string
    - `scopes` string[]
    - `targetToken` 'ACCESS' | 'ID', nullable: Defines the target token type
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `400`: The supplied request contains invalid fields or could not be parsed (json and non-json bodies). The error's code, message, and cause fields can be inspected for further information
- `401`: The supplied session does not have the correct access rights to request this resource
- `429`: The resource requested is rate limited and the rate limit has been exceeded
- `503`: The request could not be completed due to the server being busy or in a temporarily bad state

## Changes

- **2026-10-14** `f7b51eaafbbb`: 1 breaking
  - the response property `data/items/allOf[#/components/schemas/baseEntity]/tags` became nullable for the status `200`
- **2025-11-04** `e8b8c6cc7e72`: 2 info
  - added the optional property `data/items/allOf[subschema #2]/enrollToCertEnabled` to the response with the `200` status
  - added the optional property `data/items/allOf[subschema #2]/enrollToTokenEnabled` to the response with the `200` status
- **2025-03-17** `058711718149`: 1 info
  - added the optional property `data/items/allOf[subschema #2]/openIdConfigurationUrl` to the response with the `200` status
- **2025-01-27** `812d0991e712`: 1 info
  - added the optional property `data/items/allOf[subschema #2]/targetToken` to the response with the `200` status
- **2025-01-24** `19dfd92f02a2`: 2 info
  - added the non-success response with the status `503`
  - added the optional property `data/items/allOf[subschema #2]/audience` to the response with the `200` status

[Operation history](https://skmtc.dev/openziti/apis/ziti-edge-client/changes/external-jwt-signers/get.md)

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)