> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scute.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get JWKS (JSON Web Key Set) for JWT verification

> Returns the public key in JWKS format for JWT token verification. This endpoint is PUBLIC and requires no authentication.

**JWKS Compliance:**
- Compliant with RFC 7517 (JSON Web Key specification)
- Standard format expected by JWT libraries
- Includes RSA modulus (n) and exponent (e) for verification

**Why this endpoint is public:**
- Industry standard for JWT verification endpoints
- Required by OAuth2/OIDC specifications
- Enables automatic key discovery by client libraries

The endpoint delegates to the app's workspace key infrastructure.




## OpenAPI

````yaml /swagger.json get /v1/auth/{app_id}/jwks
openapi: 3.0.1
info:
  title: Scute API
  version: v1
  description: API for managing users in Scute applications
servers:
  - url: https://{defaultHost}
    variables:
      defaultHost:
        default: api.scute.io
  - url: http://localhost:3333
    description: Development server
security:
  - apiSecret: []
    userAccess: []
paths:
  /v1/auth/{app_id}/jwks:
    parameters:
      - name: app_id
        in: path
        required: true
        description: App ID
        schema:
          type: string
    get:
      tags:
        - RSA Keys
      summary: Get JWKS (JSON Web Key Set) for JWT verification
      description: >
        Returns the public key in JWKS format for JWT token verification. This
        endpoint is PUBLIC and requires no authentication.


        **JWKS Compliance:**

        - Compliant with RFC 7517 (JSON Web Key specification)

        - Standard format expected by JWT libraries

        - Includes RSA modulus (n) and exponent (e) for verification


        **Why this endpoint is public:**

        - Industry standard for JWT verification endpoints

        - Required by OAuth2/OIDC specifications

        - Enables automatic key discovery by client libraries


        The endpoint delegates to the app's workspace key infrastructure.
      operationId: getAppJWKS
      responses:
        '200':
          description: successful
          content:
            application/json:
              schema:
                type: object
                properties:
                  keys:
                    type: array
                    description: Array of JSON Web Keys
                    items:
                      type: object
                      properties:
                        kty:
                          type: string
                          description: Key type (always RSA)
                          example: RSA
                        use:
                          type: string
                          description: Key use (always sig for signature)
                          example: sig
                        kid:
                          type: string
                          description: Key ID for matching with JWT headers
                          example: ws_123_1640995200
                        alg:
                          type: string
                          description: Algorithm intended for use with this key
                          example: RS256
                        'n':
                          type: string
                          description: RSA modulus (base64url-encoded)
                          example: xUcRA7Inlw4YWJxZxBhozOHt0C3EPDrZWz9nWtNOvxtgYpS2
                        e:
                          type: string
                          description: RSA exponent (base64url-encoded)
                          example: AQAB
                      required:
                        - kty
                        - use
                        - kid
                        - alg
                        - 'n'
                        - e
                required:
                  - keys
        '404':
          description: app not found
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: App not found
                  error_code:
                    type: string
                    example: app_not_found
        '503':
          description: RSA keys not available
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: RSA keys not available
                  error_code:
                    type: string
                    example: keys_not_available
      security: []
components:
  securitySchemes:
    apiSecret:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: API Secret token
    userAccess:
      type: apiKey
      name: X-Authorization
      in: header
      description: User Access token

````