---
title: "Get workspace identity signing keys"
method: GET
path: "/.well-known/jwks.json"
tags: ["Workspace identity"]
---

# Get workspace identity signing keys

`GET /.well-known/jwks.json`

## Request

- Base URL: `https://api.replicas.dev`
- URL: `https://api.replicas.dev/.well-known/jwks.json`
- Auth: none required

Public keys for verifying workspace identity tokens, including staged rotation keys. No authentication.

## Response `200`

JSON Web Key Set

- WorkspaceIdentityJwks
  - `keys` object[], required
    - `kty` 'RSA', required
    - `kid` string, required: RFC 7638 thumbprint of the key
    - `use` 'sig'
    - `alg` 'RS256'
    - `n` string, required
    - `e` string, required

## Other responses

- `404`: Workspace identity is not configured on this installation

---

[API](https://skmtc.dev/replicas/apis/replicas-api.md) - [All operations](https://skmtc.dev/replicas/apis/replicas-api/llms.txt) - [OpenAPI document](https://skmtc.dev/replicas/apis/replicas-api/revisions/2703ac1c9cb7?raw)