> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baselayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Fetch the credential issuer's public keys (JWKS)

> The credential issuer's published public keys as an RFC 7517 JSON Web Key Set — the same rotation set the DID document carries, for verifiers that consume a JWKS directly. Unauthenticated; cacheable for one hour.



## OpenAPI

````yaml /api-reference/openapi.json get /.well-known/jwks.json
openapi: 3.1.0
info:
  title: baselayer-api-service
  version: 0.1.0
servers:
  - url: https://api.baselayer.com/
security: []
paths:
  /.well-known/jwks.json:
    get:
      tags:
        - Registry
      summary: Fetch the credential issuer's public keys (JWKS)
      description: >-
        The credential issuer's published public keys as an RFC 7517 JSON Web
        Key Set — the same rotation set the DID document carries, for verifiers
        that consume a JWKS directly. Unauthenticated; cacheable for one hour.
      operationId: get_issuer_jwks
      responses:
        '200':
          description: The issuer's published public keys (RFC 7517).
          content:
            application/jwk-set+json:
              schema:
                properties:
                  keys:
                    items:
                      properties:
                        kty:
                          type: string
                          const: OKP
                          title: Kty
                          default: OKP
                        crv:
                          type: string
                          const: Ed25519
                          title: Crv
                          default: Ed25519
                        x:
                          type: string
                          title: X
                        kid:
                          type: string
                          title: Kid
                        alg:
                          type: string
                          const: EdDSA
                          title: Alg
                          default: EdDSA
                        use:
                          type: string
                          const: sig
                          title: Use
                          default: sig
                      additionalProperties: false
                      type: object
                      required:
                        - x
                        - kid
                      title: Ed25519PublicJWK
                      description: >-
                        Public half of a KYA issuer signing key, as an RFC 8037
                        OKP JWK.


                        The wire form the did:web document and JWKS render
                        verbatim, and the

                        shape stored on ``IssuerKey.public_jwk`` — public
                        material only, never

                        the seed. ``kid`` is the RFC 7638 JWK thumbprint of the
                        key, so it is

                        derivable from the key material alone and can never
                        drift from ``x``.
                    type: array
                    title: Keys
                additionalProperties: false
                type: object
                required:
                  - keys
                title: JSONWebKeySet
                description: RFC 7517 JWKS of the issuer's published public keys.
              example:
                keys:
                  - kty: OKP
                    crv: Ed25519
                    x: 11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo
                    kid: kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k
                    alg: EdDSA
                    use: sig

````