---
title: "Get the customer-registered public key for end-to-end incident encryption"
method: GET
path: "/api/v1/account/encryption-key"
tags: ["Account"]
---

# Get the customer-registered public key for end-to-end incident encryption

`GET /api/v1/account/encryption-key`

## Request

- Base URL: `https://api.tuteliq.ai`
- URL: `https://api.tuteliq.ai/api/v1/account/encryption-key`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-api-key`

Returns the public key currently used to encrypt incident records, or 404 if none is registered. When no key is registered, incidents fall back to server-side encryption (Tuteliq holds the key). Register a public key with POST to switch to true end-to-end encryption — only your dashboard can decrypt.

## Response `200`

Default Response

- object
  - `algorithm` string
  - `public_key_pem` string
  - `key_fingerprint` string: sha256(DER(SPKI)).hex — verify on your side to confirm integrity
  - `registered_at` string
  - `rotated_from` string

---

[API](https://skmtc.dev/tuteliq/apis/tuteliq-api.md) · [All operations](https://skmtc.dev/tuteliq/apis/tuteliq-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tuteliq/apis/tuteliq-api/revisions/8490332e0031?raw)