API reference · Anis signing keys

Anis’s public signing keys

GET/.well-known/partner-signing-keys.json

Every public key that may sign Anis’s answers — including the next one before a rotation and the previous one after it. The only route that needs no signature. Clients cache it and fetch it again when an answer names a key they have not seen.

PermissionNone
AuthenticationPublic
Staff-set limits it counts towardNone
.NET SDKFetched and cached by the SDK

Request

No authentication.

Body: none.

Responses

StatusMeaningBody
200Success.SigningKeySet

Types

SigningKeySet

FieldTypeNotes
keysalways presentlist of PublicJwkEvery public key that may sign an answer — including the next one before a rotation and the previous one after it.

PublicJwk

FieldTypeNotes
ktyalways presentstringAlways EC. Values: EC
crvalways presentstringAlways P-256. Values: P-256
xalways presentstringThe key’s x coordinate: exactly 32 bytes, base64url without padding.
yalways presentstringThe key’s y coordinate: exactly 32 bytes, base64url without padding.
kidstringIn Anis’s signing keys: the key an answer’s signature names. Treat it as an opaque name. Not sent when you submit your own key.
usestringIntended use, when published.
algstringAlgorithm, when published.