POST
/api/apis/{api_server_id}/jwks-access-keyAuthenticatedGenerate a JWKS access key
Generates the initial JWKS access key pair of an API server and returns the private key once; the auth server keeps only the public key. Responds 409 when a key already exists (use PUT to rotate it). No request body.
operationId
post_api_apis_api_server_id_jwks_access_keyAPI serversAuthentication & permissionsAuthenticated
Any authenticated user
- Accepted credentials
- Auth server session (refresh token cookie)
cookie "refresh_token_<auth_server_app_id>" - Access token (cookie)
cookie "access_token_<auth_server_app_id>" - Access token (Bearer)
Authorization: Bearer <JWT>
- Auth server session (refresh token cookie)
- Who may call
- Any authenticated user
- Notes
- Organization owners/admins of the owning organization, the owning user of a user-owned API server, or platform administrators. Refused for the auth server's own API server, which is the JWKS provider itself.
Path parameters
| Name | Type | Description |
|---|---|---|
| api_server_id* | string | API server id |
Responses
application/json
JwksAccessKeyGeneratedResponse
| Property | Type | Description |
|---|---|---|
| success* | true | |
| message* | string | |
| key_id* | string | Identifier of the new key pair |
| private_key* | string | PEM-encoded private key. Shown exactly once; the auth server keeps only the public key. |
JSONExample
"success"true
"message""string"
"key_id""string"
"private_key""string"
Example request
bashcurl
curl -X POST 'https://auth.schemavaults.com/api/apis/<api_server_id>/jwks-access-key' \
-b 'refresh_token_<auth_server_app_id>=<value>'