---
title: "Get Agent webhook verification keys"
method: GET
path: "/webhook/keys"
tags: ["Agents"]
---

# Get Agent webhook verification keys

`GET /webhook/keys`

## Request

- Base URL: `https://api.fido.id/1.0`
- URL: `https://api.fido.id/1.0/webhook/keys`
- Auth: none declared. Required headers: `x-api-key`

Retrieve the public keys used to verify signatures on [Agent](https://docs.trustfull.com/docs/agents) webhook alerts.

## Headers

- `content-type` string
- `accept` string
- `x-api-key` string, required

## Response `200`

Webhook verification keys

- AgentWebhookKeysResponse
  - `keys` AgentWebhookKey[], required: Currently active webhook verification keys.
    - `key_id` string, required: Identifier included in the x-trustfull-key-id webhook header.
    - `algorithm` 'RSASSA_PKCS1_V1_5_SHA_256', required: Signature algorithm used by Trustfull.
    - `public_key` string, required: PEM-encoded public key.

## Other responses

- `401`: Invalid App Key

## Changes

- **2026-11-03** `be8ae1d26648`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/trustfull/apis/products/changes/webhook/keys/get.md)

---

[API](https://skmtc.dev/trustfull/apis/products.md) - [All operations](https://skmtc.dev/trustfull/apis/products/llms.txt) - [OpenAPI document](https://skmtc.dev/trustfull/apis/products/revisions/be8ae1d26648?raw)