GET/api/apis/{api_server_id}/jwks-access-keyAuthenticated

Get JWKS access key metadata

Reports the active JWKS access key of an API server (id, creation time, active flag) without the key material. key_metadata is false when no key has been generated yet.

operationId get_api_apis_api_server_id_jwks_access_keyAPI servers

Authentication & permissionsAuthenticated

Any authenticated user

Accepted credentials: Auth server session (refresh token cookie)cookie "refresh_token_<auth_server_app_id>"
Access token (cookie)cookie "access_token_<auth_server_app_id>"
Access token (Bearer)Authorization: Bearer <JWT>
Who may call: Any authenticated user
Notes: Organization owners/admins of the owning organization, the owning user of a user-owned API server, or platform administrators. Refused for the auth server's own API server, which is the JWKS provider itself.

Path parameters

Name	Type	Description
api_server_id*	string	API server id

Responses

application/json

JwksAccessKeyMetadataResponse

Property	Type	Description
success*	true
key_metadata*	JwksAccessKeyStatus \| false	Metadata of the active key, or `false` when no JWKS access key has been generated yet

JSONExample

"success"true

"key_metadata"

"key_id""string"

"created_at"1.5

"is_active"true

Example request

bashcurl

curl -X GET 'https://auth.schemavaults.com/api/apis/<api_server_id>/jwks-access-key' \
  -b 'refresh_token_<auth_server_app_id>=<value>'

Authentication & permissionsAuthenticated

Path parameters

Responses

200The key metadata, or key_metadata: false

400The request failed validation (issues lists the offending fields) or was refused by the handler

401No valid session cookie, access token cookie or bearer access token was presented, or the token was revoked

403The account is disabled, or the credential is valid but not allowed to perform this operation

500Failed to verify authorization

Example request

Other methods on this path