TrieOH
IdentityXAPIAuthn

Get a JWKS

Provides the JSON Web Key Set (JWKS) for verifying JWTs issued by the authentication service. Omit `project_id` for the platform keyset, or pass a project id for that project's keyset. Response is a raw JWKS document (RFC 7517), and is cached for 2 hours by the server.

GET/.well-known/jwks.json

Provides the JSON Web Key Set (JWKS) for verifying JWTs issued by the authentication service. Omit project_id for the platform keyset, or pass a project id for that project's keyset. Response is a raw JWKS document (RFC 7517), and is cached for 2 hours by the server.

Query Parameters

project_id?string

Project to scope the operation to. Omit for IdentityX itself.

Response Body

application/json

application/problem+json

application/problem+json

curl -X GET "https://example.com/.well-known/jwks.json"
{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
    }
  ]
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 500,
  "title": "Internal Server Error"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 503,
  "title": "Identity Unavailable"
}

Introspect the current identity GET

Returns the identity resolved from the current credential — the actor (subject) plus the credential type used (JWT token or API key). API keys authenticate with their full raw key; the subject carries the key's capability grants.

List your organizations GET

Lists the organizations the authenticated platform-level actor belongs to. Requires a JWT or API key bound to a platform-level (non-project-scoped) actor.