API reference · Anis signing keys
Anis’s public signing keys
GET
/.well-known/partner-signing-keys.jsonEvery public key that may sign Anis’s answers — including the next one before a rotation and the previous one after it. The only route that needs no signature. Clients cache it and fetch it again when an answer names a key they have not seen.
PermissionNone
AuthenticationPublic
Staff-set limits it counts towardNone
.NET SDK
Fetched and cached by the SDKRequest
No authentication.
Body: none.
Responses
| Status | Meaning | Body |
|---|---|---|
| 200 | Success. | SigningKeySet |
Types
SigningKeySet
| Field | Type | Notes |
|---|---|---|
keysalways present | list of PublicJwk | Every public key that may sign an answer — including the next one before a rotation and the previous one after it. |
PublicJwk
| Field | Type | Notes |
|---|---|---|
ktyalways present | string | Always EC. Values: EC |
crvalways present | string | Always P-256. Values: P-256 |
xalways present | string | The key’s x coordinate: exactly 32 bytes, base64url without padding. |
yalways present | string | The key’s y coordinate: exactly 32 bytes, base64url without padding. |
kid | string | In Anis’s signing keys: the key an answer’s signature names. Treat it as an opaque name. Not sent when you submit your own key. |
use | string | Intended use, when published. |
alg | string | Algorithm, when published. |