---
title: "Get HITL keypair metadata"
method: GET
path: "/api/v1/hitl/{id}/keys"
tags: ["HITL"]
---

# Get HITL keypair metadata

`GET /api/v1/hitl/{id}/keys`

## Request

- Base URL: `https://api.proof.holdings`
- URL: `https://api.proof.holdings/api/v1/hitl/{id}/keys`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `auth_token`

The RSA keypair attached to a HITL config. A caller with `hitl:read` (or a dashboard session) receives the public key plus the private key as stored — wrapped client-side under a key the server never holds, so it is returned in a form the server cannot open. A key holding `confirmations:create` without `hitl:read` receives only `public_key` and `kid`: what it needs to seal a confirmation message, nothing more.

## Path parameters

- `id` string, required: HITL config id

## Response `200`

Keypair metadata

- object

## Other responses

- `404`: HITL config not found

---

[API](https://skmtc.dev/proof/apis/proof-holdings-api.md) · [All operations](https://skmtc.dev/proof/apis/proof-holdings-api/llms.txt) · [OpenAPI document](https://skmtc.dev/proof/apis/proof-holdings-api/revisions/6b8d61ee354f?raw)