---
title: "Get workspace identity configuration"
method: GET
path: "/v1/environments/{environment_id}/workload-identity"
tags: ["Workspace identity"]
---

# Get workspace identity configuration

`GET /v1/environments/{environment_id}/workload-identity`

## Request

- Base URL: `https://api.replicas.dev`
- URL: `https://api.replicas.dev/v1/environments/{environment_id}/workload-identity`
- Auth: HTTP bearer

Returns the issuer, discovery, and JWKS URLs for [workspace identity](/features/workspaces/workspace-identity) tokens. Tokens are minted inside workspaces, not through the API.

## Path parameters

- `environment_id` string, required

## Headers

- `X-Replicas-Api-Version` '2026-10-07'

## Response `200`

Identity configuration

- WorkloadIdentityResponse: Issuer configuration workspaces mint tokens against. Contains no token values.
  - `configured` boolean, required
  - `issuer` string, nullable, required
  - `discovery_url` string, nullable, required
  - `jwks_url` string, nullable, required

## Other responses

- `401`: Unauthorized - Invalid or missing API key
- `403`: Forbidden - The authenticated account cannot access this resource
- `404`: Resource not found
- `500`: Internal server error

---

[API](https://skmtc.dev/replicas/apis/replicas-api.md) - [All operations](https://skmtc.dev/replicas/apis/replicas-api/llms.txt) - [OpenAPI document](https://skmtc.dev/replicas/apis/replicas-api/revisions/2703ac1c9cb7?raw)