> ## Documentation Index
> Fetch the complete documentation index at: https://turnkey-0e7c1f5b-traian-remove-eip-712-note.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Get webhook JWKS

> Fetch Turnkey webhook signature verification keys.

export const NestedParam = ({parentKey, childKey, type, required, description, children}) => {
  const fullKey = `${parentKey}.${childKey}`;
  const anchorId = `body-${fullKey.replace(/\./g, '-')}`;
  return <div className="py-6 border-gray-100 dark:border-gray-800 border-b last:border-b-0">
  <div className="flex font-mono text-sm group/param-head param-head break-all relative" id={anchorId}>
    <div className="flex-1 flex content-start py-0.5 mr-5">
      <div className="flex items-center flex-wrap gap-2">
        <div className="absolute -top-1.5">
          <a href={`#${anchorId}`} className="-ml-[2.1rem] flex items-center opacity-0 border-0 group-hover/param-head:opacity-100 py-2 [.expandable-content_&]:-ml-[2.1rem]" aria-label="Navigate to header">
            <div className="w-6 h-6 text-gray-400 rounded-md flex items-center justify-center zinc-box bg-white ring-1 ring-gray-400/30 dark:ring-gray-700/25 hover:ring-gray-400/60 dark:hover:ring-white/20">
              <svg xmlns="http://www.w3.org/2000/svg" fill="gray" height="12px" viewBox="0 0 576 512">
                <path d="M0 256C0 167.6 71.6 96 160 96h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C98.1 144 48 194.1 48 256s50.1 112 112 112h72c13.3 0 24 10.7 24 24s-10.7 24-24 24H160C71.6 416 0 344.4 0 256zm576 0c0 88.4-71.6 160-160 160H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c61.9 0 112-50.1 112-112s-50.1-112-112-112H344c-13.3 0-24-10.7-24-24s10.7-24 24-24h72c88.4 0 160 71.6 160 160zM184 232H392c13.3 0 24 10.7 24 24s-10.7 24-24 24H184c-13.3 0-24-10.7-24-24s10.7-24 24-24z"></path>
              </svg>
            </div>
          </a>
        </div>
        <div className="font-semibold text-primary dark:text-primary-light cursor-pointer overflow-wrap-anywhere">
          <span className="text-gray-500 dark:text-gray-400">{parentKey}.</span>
          {childKey}
        </div>
        <div className="inline items-center gap-2 text-xs font-medium [&_div]:inline [&_div]:mr-2 [&_div]:leading-5">
          <div className="flex items-center px-2 py-0.5 rounded-md bg-gray-100/50 dark:bg-white/5 text-gray-600 dark:text-gray-200 font-medium break-all">
            <span>{type}</span>
          </div>
          {required && <span className="px-2 py-0.5 rounded-md bg-red-100/50 dark:bg-red-400/10 text-red-600 dark:text-red-300 font-medium whitespace-nowrap">
              required
            </span>}
        </div>
      </div>
    </div>
  </div>
  {children && <div className="mt-4">
      <div className="prose prose-sm prose-gray dark:prose-invert">
        {children}
      </div>
    </div>}
</div>;
};

export const H3Bordered = ({text}) => <h3 id={text.toLowerCase()} className="border-b pb-2.5 border-gray-100 dark:border-gray-800">
    {text}
  </h3>;

Fetch the public Ed25519 keys used to verify Turnkey webhook signatures. This endpoint requires no authentication.

For full verification guidance, including signed message construction and SDK helper usage, see [Verify webhook signatures](/features/webhooks/verify-signatures).

Cache the JWKS response according to the `Cache-Control` header. Match each JWK `kid` to the webhook delivery's `X-Turnkey-Signature-Key-Id` header, and refetch JWKS before rejecting a delivery with an unknown `kid`.

Current production `Cache-Control`:

```text theme={null}
public, max-age=86400, s-maxage=86400, stale-if-error=604800
```

<H3Bordered text="Response" />

A successful response returns the following fields:

<ResponseField name="keys" type="array" required={true}>
  Public webhook signature verification keys.

  <Expandable title="keys details">
    <NestedParam parentKey="keys" childKey="kid" type="string" required={true}>
      Key identifier. Match this value against the `X-Turnkey-Signature-Key-Id` delivery header.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="kty" type="string" required={true}>
      Key type. The current value is `OKP` for Ed25519 public keys.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="crv" type="string" required={true}>
      Key curve. The current value is `Ed25519`.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="alg" type="string" required={true}>
      JWK algorithm. The current value is `EdDSA`.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="use" type="string" required={true}>
      Key use. The current value is `sig` for signature verification.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="x" type="string" required={true}>
      Base64url-encoded Ed25519 public key.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="turnkey_signature_algorithm" type="string" required={true}>
      Turnkey signature algorithm metadata. The current value is `ed25519`.
    </NestedParam>

    <NestedParam parentKey="keys" childKey="turnkey_signature_version" type="string" required={true}>
      Turnkey signature contract version metadata. The current value is `v1`.
    </NestedParam>
  </Expandable>
</ResponseField>

<ResponseExample>
  ```json 200 theme={null}
  {
    "keys": [
      {
        "kid": "<signing-key-id>",
        "kty": "OKP",
        "crv": "Ed25519",
        "alg": "EdDSA",
        "use": "sig",
        "x": "<base64url-encoded-public-key>",
        "turnkey_signature_algorithm": "ed25519",
        "turnkey_signature_version": "v1"
      }
    ]
  }
  ```
</ResponseExample>