Hanzo
OpenapiLicensing

Pubkey publishes the Ed25519 PUBLIC verification key, at both /pubkey and /jwks. — GET /v1/licensing/pubkey

Pubkey publishes the Ed25519 PUBLIC verification key, at both /pubkey and /jwks.

GET /v1/licensing/pubkey

Addresshttps://api.hanzo.ai/v1/licensing/pubkey
MethodGET
Operationget_licensing_pubkey
AuthAuthorization: Bearer $HANZO_API_KEY

Pubkey publishes the Ed25519 PUBLIC verification key, at both /pubkey and /jwks.

This is the only public-safe surface here and the reason the whole scheme works offline: the engine embeds or fetches this key once and then verifies every license itself, with no call home per launch. The private half never enters this process — it lives in the KMS — so nothing served here is a secret. provider names the KMS holding that half; "local" means a development key, and a token signed by one is not a production credential.

Request

GET /v1/licensing/pubkey takes no parameters and no body — the credential is the whole request.

Response

StatusBodyMeaning
200licensing.PubkeyViewok

200 body — 10 fields.

FieldInTypeAlwaysDescription
algbodystringAlg is always "Ed25519".
keysbodylicensing.JWK[]Keys is the same key as a single-entry JWKS (OKP/Ed25519), for JWKS-shaped consumers.
keys[].crvbodystringCrv is always "Ed25519".
keys[].ktybodystringKty is always "OKP".
keys[].usebodystringUse is always "sig".
keys[].xbodystringX is the public key, base64url (the JWK convention).
providerbodystringProvider names the KMS holding the private half ("local" | "aws" | ...).
public_keybodystringPublicKey is the 32-byte Ed25519 public key, standard base64.
schemabodyintegerSchema is the license payload schema version this key signs.
token_formatbodystringTokenFormat states the wire layout so an implementer can verify a token without this service's source.

Failure carries the platform error shape — see Errors.

Examples

hanzo licensing pubkey

Licensing API · All Hanzo APIs · Interactive reference

How is this guide?

On this page