---
title: "List Trusted OAuth2 JWT Bearer Grant Type Issuers"
method: GET
path: "/admin/trust/grants/jwt-bearer/issuers"
tags: ["oAuth2"]
---

# List Trusted OAuth2 JWT Bearer Grant Type Issuers

`GET /admin/trust/grants/jwt-bearer/issuers`

## Request

- Base URL: `/` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/admin/trust/grants/jwt-bearer/issuers`
- Auth: none declared

Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.

## Query parameters

- `page_size` integer
- `page_token` string
- `issuer` string

## Response `200`

trustedOAuth2JwtGrantIssuers

- TrustedOAuth2JwtGrantIssuer[]: OAuth2 JWT Bearer Grant Type Issuer Trust Relationships
  - `allow_any_subject` boolean: The "allow_any_subject" indicates that the issuer is allowed to have any principal as the subject of the JWT.
  - `created_at` string, date-time: The "created_at" indicates, when grant was created.
  - `expires_at` string, date-time: The "expires_at" indicates, when grant will expire, so we will reject assertion from "issuer" targeting "subject".
  - `id` string
  - `issuer` string: The "issuer" identifies the principal that issued the JWT assertion (same as "iss" claim in JWT).
  - `public_key` TrustedOAuth2JwtGrantJsonWebKey: OAuth2 JWT Bearer Grant Type Issuer Trusted JSON Web Key
    - `kid` string: The "key_id" is key unique identifier (same as kid header in jws/jwt).
    - `set` string: The "set" is basically a name for a group(set) of keys. Will be the same as "issuer" in grant.
  - `scope` string[]: The "scope" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])
  - `subject` string: The "subject" identifies the principal that is the subject of the JWT.

## Other responses

- `default`: genericError

## Changes

- **2025-06-27** `63912386dae3`: 2 warning, 2 info
  - deleted the `query` request parameter `DefaultItems`
  - deleted the `query` request parameter `MaxItems`
  - added the new optional `query` request parameter `page_size`
  - added the new optional `query` request parameter `page_token`
- **2022-10-11** `cec56a3dc789`: 2 warning, 3 info
  - deleted the `query` request parameter `limit`
  - deleted the `query` request parameter `offset`
  - api operation id `adminListTrustedOAuth2JwtGrantIssuers` removed and replaced with `listTrustedOAuth2JwtGrantIssuers`
  - api tag `oAuth2` added
  - …1 more
- **2022-09-07** `88502aa29515`: 1 info
  - endpoint added
- **2022-09-07** `37cdf14a14a3`: 1 breaking
  - api path removed without deprecation
- **2022-09-07** `269465fa258a`: 5 info
  - added the new optional `query` request parameter `DefaultItems`
  - added the new optional `query` request parameter `MaxItems`
  - added the new optional `query` request parameter `issuer`
  - added the new optional `query` request parameter `limit`
  - …1 more

[Operation history](https://skmtc.dev/ory/apis/ory-hydra/changes/admin/trust/grants/jwt-bearer/issuers/get.md)

---

[API](https://skmtc.dev/ory/apis/ory-hydra.md) - [All operations](https://skmtc.dev/ory/apis/ory-hydra/llms.txt) - [OpenAPI document](https://skmtc.dev/ory/apis/ory-hydra/revisions/a302a90a0e8a?raw)