Hanzo AI

List keys

Publishes the keys attestations are signed with, as a JSON Web Key Set (RFC 7517; Ed25519 keys as RFC 8037 writes them).

GET /v1/principal/keys

Addresshttps://api.hanzo.ai/v1/principal/keys
MethodGET
Operationget_principal_keys
AuthAuthorization: Bearer $HANZO_API_KEY

Publishes the keys attestations are signed with, as a JSON Web Key Set (RFC 7517; Ed25519 keys as RFC 8037 writes them). Open to anyone: a verifier verifying an agent's statement fetches this once and verifies offline.

A key a rotation retired stays here and signs nothing, so a statement signed before the rotation verifies until it expires.

Request

GET /v1/principal/keys takes no parameters and no body — the credential is the whole request.

Response

StatusBodyMeaning
200principal.JWKSok
defaultproblem-detailsrefused

200 body — 7 fields.

FieldInTypeAlwaysDescription
keysbodyprincipal.JWK[]—
keys[].algbodystring—Alg is EdDSA.
keys[].crvbodystring—Crv is Ed25519.
keys[].kidbodystring—Kid names the key; a statement's header carries it.
keys[].ktybodystring—Kty is OKP, an octet key pair.
keys[].usebodystring—Use is sig.
keys[].xbodystring—X is the public key, base64url without padding.

Failure carries the platform error shape — see Errors.

Examples

hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.


Principal API · All Hanzo APIs · Interactive reference

How is this guide?

On this page