---
title: "List JSON Web Keys in a set"
method: GET
path: "/v2/jwkSets/{jwkSetId}/jsonWebKeys"
tags: ["jwkSets"]
---

# List JSON Web Keys in a set

`GET /v2/jwkSets/{jwkSetId}/jsonWebKeys`

## Request

- Base URL: `https://api.sigmacomputing.com`
- URL: `https://api.sigmacomputing.com/v2/jwkSets/{jwkSetId}/jsonWebKeys`
- Auth: HTTP bearer

List every JSON Web Key belonging to a JWK set, used to sign JWT bearer tokens for connections configured with `useJwt`. Never returns private key material.

### Usage notes
- Any authenticated user in the organization can make this request.
- A JWK set holds at most two keys at a time (the active key plus, during rotation, one inactive key).

### Usage scenarios
- **Key rotation:** Inspect a set's current keys before activating a new one or removing a retired one.

## Path parameters

- `jwkSetId` string, required

## Response `200`

The response body.

- JwkSetsListJsonWebKeysResponse200
  - `entries` V2JwkSetsJwkSetIdJsonWebKeysGetResponsesContentApplicationJsonSchemaEntriesItems[], required: Array of results returned by the endpoint
    - `jsonWebKeyId` string, required: Unique identifier of the JSON Web Key.
    - `jwkSetId` string, required: Unique identifier of the JWK set this key belongs to.
    - `algorithm` 'RS256' | 'ES256', required: Signing algorithm this key was generated for.
    - `publicKey` string, required: PEM-encoded X.509 certificate wrapping the public key. Never includes private key material.
    - `expiresAt` string, date-time, required: Expiration timestamp of the underlying certificate.
    - `status` 'active' | 'inactive', required: `active` if this is the key currently used to sign JWT bearer tokens for the set, otherwise `inactive`.
  - `nextPageToken` string: A string that can be passed to the `pageToken` parameter in the next request to fetch the next page of results. Not present in the last page of results. **Must be treated as an opaque string.**

---

[API](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api.md) - [All operations](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api/revisions/fb6036208c49?raw)