Public keys a resource server (or the FastAPI middleware) uses to
verify access-token signatures locally, without a per-request call to
MudraID. Returns every key currently valid for verification — the
active signing key plus rotated-but-not-retired keys.
Cache it, and refetch immediately on an unknown kid. The endpoint
sets Cache-Control: public, max-age=3600 (shorter when serving a
last-known-good set).
GET
/
.well-known
/
jwks.json
JSON Web Key Set for access-token verification
curl --request GET \ --url https://api.mudraid.ai/.well-known/jwks.json
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"MudraID","description":"A trust layer for AI agents. Verifiable identity, scoped access, and fast revocation for agent-to-API calls.","colors":{"primary":"#4F46E5","light":"#818CF8","dark":"#3730A3"},"logo":{"light":"https://mintcdn.com/decryptogen/z-Oj43wlHE8zplz5/logo/light.png?fit=max\u0026auto=format\u0026n=z-Oj43wlHE8zplz5\u0026q=85\u0026s=0c6c21890a4cafe2c104b7662de241dd","dark":"https://mintcdn.com/decryptogen/c55QGh_jKgDanCLK/logo/dark.png?fit=max\u0026auto=format\u0026n=c55QGh_jKgDanCLK\u0026q=85\u0026s=e23c37fad98bb4b4cfdd81c18c0f9927"},"favicon":"https://mintcdn.com/decryptogen/HDWn3R8cmMvdFoEj/favicon.png?fit=max\u0026auto=format\u0026n=HDWn3R8cmMvdFoEj\u0026q=85\u0026s=0d72142173735dabb31eb3c139604740","navbar":{"primary":{"type":"button","label":"Get Started","href":"/guides/get-started/what-is-mudraid"}},"footer":{"socials":{"x":"https://x.com/mudraid","linkedin":"https://www.linkedin.com/company/mudraid","youtube":"https://www.youtube.com/@mudraid"},"links":[{"header":"Product","items":[{"label":"Overview","href":"/overview/introduction"},{"label":"Security","href":"/security/overview"},{"label":"Pricing","href":"https://mudraid.ai/pricing"}]},{"header":"Developers","items":[{"label":"Documentation","href":"/overview/introduction"},{"label":"API reference","href":"/api-reference/introduction"},{"label":"SDKs","href":"/sdks/python-sdk/overview"}]},{"header":"Company","items":[{"label":"About","href":"https://mudraid.ai/about"},{"label":"Contact","href":"https://mudraid.ai/contact"}]},{"header":"Legal","items":[{"label":"Terms \u0026 Conditions","href":"https://mudraid.ai/terms"},{"label":"Privacy Policy","href":"https://mudraid.ai/privacy"}]}]},"seo":{"metatags":{"og:type":"website","og:site_name":"MudraID","og:title":"MudraID — a trust layer for AI agents","og:description":"Verifiable identity, scoped access, and fast revocation for agent-to-API calls.","og:image":"https://docs.mudraid.ai/images/og-cover.png","twitter:card":"summary_large_image","twitter:title":"MudraID — a trust layer for AI agents","twitter:description":"Verifiable identity, scoped access, and fast revocation for agent-to-API calls.","twitter:image":"https://docs.mudraid.ai/images/og-cover.png"}},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"decryptogen","hasAudioNarration":false,"actualSubdomain":"decryptogen","customDomains":["docs.mudraid.ai"],"gitSource":{"type":"github","owner":"decryptellix","repo":"mudraid-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{"AI_CHAT":{"status":"DISABLED"}},"buildId":"6acc951d1ea505514a77d0c0","clientVersion":"0.0.4117","searchFilterCounts":[{"language":"default","tag":"For developers","count":23},{"language":"default","tag":"API Reference","count":8},{"language":"default","tag":"Overview","count":7},{"language":"default","tag":"For decision-makers","count":7},{"language":"default","tag":"Resources","count":6},{"language":"default","tag":"Public Contracts","count":6},{"language":"default","tag":"Agent Developer","count":4},{"language":"default","tag":"Concepts","count":4},{"language":"default","tag":"Platform Operator","count":4},{"language":"default","tag":"FastAPI Middleware","count":4}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":"img[src*=\"/logo/\"]{height:48px!important;max-height:48px!important;width:auto!important}footer{background:radial-gradient(circle at top left, #102A5C 0%, #050816 45%, #02040A 100%)!important}footer p,footer a,footer li,footer span,footer small,footer strong,footer h2,footer h3,footer h4{color:#E5E7EB!important}footer a:hover{color:#FFFFFF!important}footer img[src*=\"/logo/\"]{content:url(\"/logo/white-v3.png\");height:50px!important;max-height:50px!important}footer :has(>img[src*=\"/logo/\"])::after{content:\"Secure identity and trust infrastructure for AI agents. Verify agents, delegate authority, and scale automation with confidence.\";display:block;max-width:22rem;margin-top:0.75rem;color:#9CA3AF;font-size:0.875rem;line-height:1.6}"}],"page":{"pagePath":"api-reference/resource-server/json-web-key-set-for-access-token-verification","slug":"/api-reference/resource-server/json-web-key-set-for-access-token-verification","pageMetadata":{"title":"JSON Web Key Set for access-token verification","description":"Public keys a resource server (or the FastAPI middleware) uses to\nverify access-token signatures locally, without a per-request call to\nMudraID. Returns every key currently valid for verification — the\nactive signing key plus rotated-but-not-retired keys.\n\nCache it, and refetch immediately on an unknown `kid`. The endpoint\nsets `Cache-Control: public, max-age=3600` (shorter when serving a\nlast-known-good set).\n","deprecated":null,"version":null,"openapi":"/openapi.yaml get /.well-known/jwks.json","href":"/api-reference/resource-server/json-web-key-set-for-access-token-verification","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {Fragment: _Fragment, jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_Fragment, {\n children: [_jsx(_components.p, {\n children: \"Public keys a resource server (or the FastAPI middleware) uses to\\nverify access-token signatures locally, without a per-request call to\\nMudraID. Returns every key currently valid for verification — the\\nactive signing key plus rotated-but-not-retired keys.\"\n }), \"\\n\", _jsxs(_components.p, {\n children: [\"Cache it, and refetch immediately on an unknown \", _jsx(_components.code, {\n children: \"kid\"\n }), \". The endpoint\\nsets \", _jsx(_components.code, {\n children: \"Cache-Control: public, max-age=3600\"\n }), \" (shorter when serving a\\nlast-known-good set).\"]\n })]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"JSON Web Key Set for access-token verification","description":"Public keys a resource server (or the FastAPI middleware) uses to\nverify access-token signatures locally, without a per-request call to\nMudraID. Returns every key currently valid for verification — the\nactive signing key plus rotated-but-not-retired keys.\n\nCache it, and refetch immediately on an unknown `kid`. The endpoint\nsets `Cache-Control: public, max-age=3600` (shorter when serving a\nlast-known-good set).\n","deprecated":null,"version":null,"openapi":"/openapi.yaml get /.well-known/jwks.json","href":"/api-reference/resource-server/json-web-key-set-for-access-token-verification","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"tags":["resource-server"],"summary":"JSON Web Key Set for access-token verification","description":"Public keys a resource server (or the FastAPI middleware) uses to\nverify access-token signatures locally, without a per-request call to\nMudraID. Returns every key currently valid for verification — the\nactive signing key plus rotated-but-not-retired keys.\n\nCache it, and refetch immediately on an unknown `kid`. The endpoint\nsets `Cache-Control: public, max-age=3600` (shorter when serving a\nlast-known-good set).\n","responses":{"200":"28072ff2-e096-4686-8100-22bb3bf1c41f","503":"5b17523d-df03-4eb6-86ba-7c7d5ec2fa48"},"method":"get","type":"path","servers":["0cb9675d-7dfb-4618-b1d0-a6d2d223da37"],"security":[],"path":"/.well-known/jwks.json","baseUrlOptions":["https://api.mudraid.ai"],"title":"JSON Web Key Set for access-token verification","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{},"responses":{"28072ff2-e096-4686-8100-22bb3bf1c41f":{"description":"Key set","content":{"application/json":{"schema":{"type":"object","required":["keys"],"properties":{"keys":{"type":"array","items":{"type":"object","required":["kty","use","alg","kid","n","e"],"properties":{"kty":{"type":"string","enum":["RSA"],"isRequired":true,"uniqueKey":"keys.items.[INDEX].kty","typeLabel":"enum\u003cstring>"},"use":{"type":"string","enum":["sig"],"isRequired":true,"uniqueKey":"keys.items.[INDEX].use","typeLabel":"enum\u003cstring>"},"alg":{"type":"string","enum":["RS256"],"isRequired":true,"uniqueKey":"keys.items.[INDEX].alg","typeLabel":"enum\u003cstring>"},"kid":{"type":"string","isRequired":true,"uniqueKey":"keys.items.[INDEX].kid","typeLabel":"string"},"n":{"type":"string","description":"RSA modulus, base64url no padding","isRequired":true,"uniqueKey":"keys.items.[INDEX].n","typeLabel":"string"},"e":{"type":"string","description":"RSA exponent, base64url no padding","isRequired":true,"uniqueKey":"keys.items.[INDEX].e","typeLabel":"string"}},"uniqueKey":"keys.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"keys","typeLabel":"object[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"keys":[{"kty":"RSA","use":"sig","alg":"RS256","kid":"\u003cstring>","n":"\u003cstring>","e":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"5b17523d-df03-4eb6-86ba-7c7d5ec2fa48":{"description":"Key discovery is temporarily unavailable and no key set has been\nserved yet by this instance. Retry; keep using a cached set.\n","content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}}},"security":{},"servers":{"0cb9675d-7dfb-4618-b1d0-a6d2d223da37":{"url":"https://api.mudraid.ai","description":"Production"}}},"originalFileLocation":"openapi.yaml"},"subdomain":"decryptogen","siteName":"MudraID","title":"MudraID — a trust layer for AI agents","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-12T08:06:56.323Z","originalFileLocation":"api-reference/resource-server/json-web-key-set-for-access-token-verification.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Public keys a resource server (or the FastAPI middleware) uses to verify access-token signatures locally, without a per-request call to MudraID. Returns every key currently valid for verification — the active signing key plus rotated-but-not-retired keys. Cache it, and refetch immediately on an unknown kid. The endpoint sets Cache-Control: public, max-age=3600 (shorter when serving a last-known-good set).\">\u003cmeta data-mint-head name=\"application-name\" content=\"MudraID\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"MudraID — a trust layer for AI agents\">\u003cmeta data-mint-head property=\"og:description\" content=\"Verifiable identity, scoped access, and fast revocation for agent-to-API calls.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"MudraID\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://docs.mudraid.ai/images/og-cover.png\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"MudraID — a trust layer for AI agents\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Verifiable identity, scoped access, and fast revocation for agent-to-API calls.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://docs.mudraid.ai/images/og-cover.png\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/decryptogen/p1JSV7b_3S0N2-B9/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"MudraID\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#4F46E5\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/resource-server/json-web-key-set-for-access-token-verification.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.mudraid.ai/#organization\",\"name\":\"MudraID\",\"url\":\"https://docs.mudraid.ai\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/decryptogen/z-Oj43wlHE8zplz5/logo/light.png?fit=max\u0026auto=format\u0026n=z-Oj43wlHE8zplz5\u0026q=85\u0026s=0c6c21890a4cafe2c104b7662de241dd\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.mudraid.ai#website\",\"name\":\"MudraID\",\"url\":\"https://docs.mudraid.ai\",\"publisher\":{\"@id\":\"https://docs.mudraid.ai/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification#webpage\",\"url\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification\",\"name\":\"JSON Web Key Set for access-token verification\",\"description\":\"Public keys a resource server (or the FastAPI middleware) uses to verify access-token signatures locally, without a per-request call to MudraID. Returns every key currently valid for verification — the active signing key plus rotated-but-not-retired keys. Cache it, and refetch immediately on an unknown kid. The endpoint sets Cache-Control: public, max-age=3600 (shorter when serving a last-known-good set).\",\"dateModified\":\"2026-10-12T08:06:56.323Z\",\"isPartOf\":{\"@id\":\"https://docs.mudraid.ai#website\"},\"breadcrumb\":{\"@id\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Public Contracts\",\"item\":\"https://docs.mudraid.ai/api-reference/oauth/exchange-machine-client-credentials-for-an-access-token\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"JSON Web Key Set for access-token verification\",\"item\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification#apireference\",\"headline\":\"JSON Web Key Set for access-token verification\",\"name\":\"JSON Web Key Set for access-token verification\",\"description\":\"Public keys a resource server (or the FastAPI middleware) uses to verify access-token signatures locally, without a per-request call to MudraID. Returns every key currently valid for verification — the active signing key plus rotated-but-not-retired keys. Cache it, and refetch immediately on an unknown kid. The endpoint sets Cache-Control: public, max-age=3600 (shorter when serving a last-known-good set).\",\"url\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification\",\"mainEntityOfPage\":{\"@id\":\"https://docs.mudraid.ai/api-reference/resource-server/json-web-key-set-for-access-token-verification#webpage\"},\"image\":\"https://docs.mudraid.ai/images/og-cover.png\",\"dateModified\":\"2026-10-12T08:06:56.323Z\",\"publisher\":{\"@id\":\"https://docs.mudraid.ai/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.mudraid.ai#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"MudraID\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"MudraID\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/api-reference/resource-server/json-web-key-set-for-access-token-verification.md","siteName":"MudraID","nav":{"global":null,"tabs":[{"tab":"For decision-makers","pages":[{"title":"For decision-makers","href":"/overview/introduction"}]},{"tab":"For developers","pages":[{"title":"For developers","href":"/guides/get-started/what-is-mudraid"}]},{"tab":"API Reference","groups":[{"group":"Overview","pages":[{"title":"API reference","href":"/api-reference/introduction"},{"title":"Versioning and deprecation","href":"/api-reference/versioning"}]},{"group":"Public Contracts","pages":[{"group":"oauth","pages":[{"title":"Exchange machine-client credentials for an access token","deprecated":null,"version":null,"openapi":"/openapi.yaml post /oauth2/token","href":"/api-reference/oauth/exchange-machine-client-credentials-for-an-access-token"},{"title":"Revoke a token (RFC 7009)","deprecated":null,"version":null,"openapi":"/openapi.yaml post /oauth2/revoke","href":"/api-reference/oauth/revoke-a-token-rfc-7009"},{"title":"OAuth 2.0 Authorization Server Metadata (RFC 8414)","description":"Advertises only what this authorization server implements and has\nenabled right now; fields for disabled capabilities are omitted rather\nthan listed. `issuer` is the exact `iss` stamped into access tokens.\n`scopes_supported` is deliberately absent — scopes vary per protected\nresource. The identity contract still classifies this document as a\nlive preview: its fields are capability-derived and may widen as\ncapabilities are enabled, so read them rather than hardcoding them.\nSets `Cache-Control: public, max-age=3600`. Answers `404` when the\ndeployment has disabled the metadata document.\n","deprecated":null,"version":null,"openapi":"/openapi.yaml get /.well-known/oauth-authorization-server","href":"/api-reference/oauth/oauth-20-authorization-server-metadata-rfc-8414"}]},{"group":"resource-server","pages":[{"title":"JSON Web Key Set for access-token verification","deprecated":null,"version":null,"openapi":"/openapi.yaml get /.well-known/jwks.json","href":"/api-reference/resource-server/json-web-key-set-for-access-token-verification"},{"title":"Download the platform's scope file","description":"The platform's `mudraid_scopes.yaml`: its active scope catalogue and\nits route → scope mappings, in the order the middleware must match\nthem. The FastAPI middleware reads it at startup to build its\nroute → required-scope map. The portal download emits the same bytes.\n\nAuthenticated with the platform's own API key (`X-Api-Key` plus\n`X-Api-Secret`, holding the `platform:verify` scope). A key for one\nplatform cannot read another platform's file.\n\nReturned as `text/plain`; structure documented in the\n`MudraidScopesYaml` component.\n","deprecated":null,"version":null,"openapi":"/openapi.yaml get /api/v1/platforms/{platform_id}/scopes.yaml","href":"/api-reference/resource-server/download-the-platforms-scope-file"}]},{"group":"enforcement","pages":[{"title":"Decide one protected action","deprecated":null,"version":null,"openapi":"/openapi.yaml post /api/v1/adapter/enforcement/decide","href":"/api-reference/enforcement/decide-one-protected-action"}]}]}]},{"tab":"Resources","pages":[{"title":"Resources","href":"/resources/glossary"}]}]},"basePath":"","title":"MudraID — a trust layer for AI agents","buildId":"dpl_41S5Z2jG9QnfDRwN1KZrLdBwj7DM","deploymentId":"dpl_41S5Z2jG9QnfDRwN1KZrLdBwj7DM","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-DDP9JXtj.js","utils-8yQyvEtx.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-CBCFR8Sn.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-rQaXkUHa.js","snippetPresets-J5KpBTgV.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-BVxVH4Cj.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BxdQ2vIi.js","shallow-BjV2tFiD.js","getApiPlaygroundDisplay-C_55tL4O.js","CodeSnippet-C0JpiCOC.js","CodeSnippets-w9Ps7djG.js","Page-DTNSD-0M.js","getPastedJson-BDfB-H8d.js","icon-g-kUkkO9.js","MethodPill-v4l6fq0h.js","DuplicateIcon-CvLo-CfU.js","createIcon-165clrrV.js","DynamicMarkdown-D3RQ-fEj.js","SectionHeading-vvo-3yLf.js","axios-vUo_bRtp.js","Markdown-CMT1uFWQ.js","clsx-C8f2yC9R.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CI2D8R2Y.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-k78Wrw_e.js"]}