API Endpoint

GET /management/offline/public-keys

Export active and verify-only public keys for offline-validating clients.

GET /management/offline/public-keys

Endpoint context

Use these endpoints from internal tooling or your frontend backend to inspect licenses, manage slug policy templates, provisioning API keys, webhook endpoint configuration/logs, and offline JWT signing keys. Management routes require the management bootstrap key configured via MANAGEMENT_API_KEYS or MANAGEMENT_API_KEY.

Requires management API key auth.
Returns only active and verify_only signing keys.
Ship this public verification material with client applications that validate offline JWTs.

bash

curl -sS http://localhost:8080/management/offline/public-keys   -H "Authorization: Bearer management_key_dev_123456"

Request body

json

{} (no request body)

Response body

json

{
  "signing_keys": [
    {
      "id": 1,
      "name": "desktop-app-2026",
      "kid": "61426d843cf40341f68a3053",
      "algorithm": "Ed25519",
      "status": "active",
      "public_key_pem": "-----BEGIN PUBLIC KEY-----
...
-----END PUBLIC KEY-----
",
      "created_at": "2026-04-21T12:00:00Z",
      "activated_at": "2026-04-21T12:05:00Z",
      "retired_at": null
    }
  ]
}

Response field types

signing_keys

array

Active and verify-only public signing key records.

signing_keys[].public_key_pem

string

PEM public key for JWT verification.

signing_keys[].kid

string

JWT header kid this public key verifies.

Error codes

401

Missing or invalid management API key.

500

Unexpected server or storage error.

Back to API overview