---
title: "Get app encryption pubkey"
method: GET
path: "/api/v1/kms/{kms_id}/pubkey/{app_id}"
tags: ["KMS"]
---

# Get app encryption pubkey

`GET /api/v1/kms/{kms_id}/pubkey/{app_id}`

Retrieve the public key for encrypting environment variables before deployment.

## Path parameters

- `app_id` string, required — 40-character hex string, with or without 0x prefix
- `kms_id` string, required — KMS ID (hashed) or slug

## Response `200`

Successful Response

- unknown

## Other responses

- `400` — Invalid app ID format
- `404` — KMS not found
- `422` — Validation Error
- `500` — KMS connection or internal error

---

[API](https://skmtc.dev/phala/apis/phala-cloud-api.md) · [All operations](https://skmtc.dev/phala/apis/phala-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/phala/phala-cloud-api/revisions/83c6ae62e860/schema)