---
title: "Return the calling key's kid and signing_secret for signed OG URLs (created on first call)"
method: POST
path: "/v1/keys/signing-secret"
---

# Return the calling key's kid and signing_secret for signed OG URLs (created on first call)

`POST /v1/keys/signing-secret`

## Request

- Base URL: `https://shotkiln.com`
- URL: `https://shotkiln.com/v1/keys/signing-secret`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer

## Response `200`

{ kid, signing_secret }

## Other responses

- `401`: Invalid or revoked API key

## Changes

- **2026-10-20** `8123a05b6719`: 2 info
  - the endpoint scheme security `ApiKeyHeader` was added to the API
  - the endpoint scheme security `Bearer` was added to the API

[Operation history](https://skmtc.dev/shotkiln/apis/shotkiln-api/changes/v1/keys/signing-secret/post.md)

---

[API](https://skmtc.dev/shotkiln/apis/shotkiln-api.md) · [All operations](https://skmtc.dev/shotkiln/apis/shotkiln-api/llms.txt) · [OpenAPI document](https://skmtc.dev/shotkiln/apis/shotkiln-api/revisions/8123a05b6719?raw)