---
updatedAt: 2026-06-19T07:26:13.000Z
agentTools:
  projectIndex: https://docs.verify.ibm.com/ibm-security-verify-access/llms.txt
---

# Use this endpoint to retrieve authorization server public keys

Retrieve authorization server public keys used for JWT signing or encryption operations.


# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "info": {
    "title": "IBM Security Verify Access OIDC Provider",
    "description": "This document describes all the API available in IBM Security Verify Access OIDC Provider.\n",
    "version": "0.1.0"
  },
  "servers": [
    {
      "url": "https://{pointofcontact}/oauth2",
      "variables": {
        "pointofcontact": {
          "default": "{pointofcontact}",
          "description": "URL of your IBM Security Verify Access Point of Contact"
        }
      },
      "description": "OIDC Provider"
    }
  ],
  "paths": {
    "/jwks": {
      "get": {
        "tags": [
          "JSON Web Keys (JWKS) Endpoint"
        ],
        "summary": "Use this endpoint to retrieve authorization server public keys",
        "description": "Retrieve authorization server public keys used for JWT signing or encryption operations.\n",
        "operationId": "getJwks",
        "responses": {
          "200": {
            "description": "Metadata associated with the given token.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/JwksResponse"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "JwksResponse": {
        "type": "object",
        "required": [
          "keys"
        ],
        "properties": {
          "keys": {
            "type": "array",
            "items": {
              "description": "JavaScript Object Notation (JSON) data structure that represents a cryptographic key",
              "type": "object",
              "required": [
                "kty"
              ],
              "properties": {
                "kty": {
                  "description": "The cryptographic algorithm family used with the key, such as \"RSA\" or \"EC\"",
                  "type": "string"
                },
                "use": {
                  "description": "The intended use of the public key, such as \"sig\" (signature) or \"enc\" (encryption)",
                  "type": "string"
                },
                "key_ops": {
                  "type": "array",
                  "items": {
                    "description": "The operation for which the key is intended to be used",
                    "type": "string",
                    "enum": [
                      "sign",
                      "verify",
                      "encrypt",
                      "decrypt",
                      "wrapKey",
                      "unwrapKey",
                      "deriveKey",
                      "deriveBits"
                    ]
                  }
                },
                "alg": {
                  "description": "The algorithm intended for use with the key",
                  "type": "string"
                },
                "kid": {
                  "description": "Key ID that is used to match a specific key",
                  "type": "string"
                },
                "x5u": {
                  "description": "URI that refers to a resource for an X.509 public key certificate or certificate chain",
                  "type": "string"
                },
                "x5c": {
                  "type": "array",
                  "items": {
                    "description": "Base64-encoded DER PKIX certificate value",
                    "type": "string"
                  }
                },
                "x5t": {
                  "description": "Base64url-encoded SHA-1 thumbprint of the DER encoding of an X.509 certificate",
                  "type": "string"
                },
                "x5t#S256": {
                  "description": "Base64url-encoded SHA-256 thumbprint of the DER encoding of an X.509 certificate",
                  "type": "string"
                },
                "crv": {
                  "description": "Identifies Elliptic Curve cryptographic curve used with the key.\n",
                  "type": "string",
                  "enum": [
                    "P-256",
                    "P-384",
                    "P-521"
                  ]
                },
                "x": {
                  "description": "X coordinate of the Elliptic Curve point. It is represented as the base64url\nencoding of the octet string representation of the coordinate\n",
                  "type": "string"
                },
                "y": {
                  "description": "Y coordinate of the Elliptic Curve point. It is represented as the base64url\nencoding of the octet string representation of the coordinate\n",
                  "type": "string"
                },
                "e": {
                  "description": "Exponent value for the RSA public key.It is represented as a \nBase64urlUInt-encoded value.\n",
                  "type": "string"
                },
                "n": {
                  "description": "Modulus value for the RSA public key. It is represented as a \nBase64urlUInt-encoded value.\n",
                  "type": "string"
                }
              }
            }
          }
        }
      }
    }
  }
}
```