---
title: "Get browser-safe application runtime configuration"
method: GET
path: "/runtime-config/{applicationId}"
tags: ["PlatformBootstrap"]
---

# Get browser-safe application runtime configuration

`GET /runtime-config/{applicationId}`

Returns the sanitized runtime configuration response for a known
platform-hosted browser application.

Known application ids include `admin-console`, `platform-onboarding`,
and `license-portal`. Unknown application ids are rejected. The response
is safe to expose to browser JavaScript and does not include internal
Kubernetes or Docker addresses, raw secrets, business-authored credential
artifacts, DCQL query bodies, issuer or verifier designs, or service
configuration bodies.

The response may use the inbound request origin as the platform base URL.
That behavior is for browser runtime wiring only; `.well-known` protocol
metadata continues to use the canonical public endpoint binding for the
resolved tenant/service.

`tenantKms` is the tenant-KMS API service object. It is not a KMS
provider inventory. Tenant default providers, platform/internal KMS
providers, and additional tenant providers remain managed through the
platform-config `kms.providers` domain.

## Path parameters

- `applicationId` string, required

## Query parameters

- `tenantId` string
- `tenantSlug` string
- `knownRevision` string

## Response `200`

Runtime configuration response.

- ApplicationRuntimeConfigResponse — unresolved $ref

## Other responses

- `400` — unresolved $ref
- `404` — Unknown application id or runtime bootstrap surface unavailable.
- `500` — unresolved $ref

---

[API](https://skmtc.dev/sphereon-opensource/apis/platform-bootstrap-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/platform-bootstrap-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/platform-bootstrap-api/revisions/fc9da9308a5c/schema)