GET /v1/mandate/jwks - Inviolet

Public-key set used to verify Inviolet-signed mandate JWTs.

Request

GET /v1/mandate/jwks

No auth required. Cache-control header is public, max-age=60.

Response (200 OK)

{
  "keys": [
    {
      "kty": "RSA",
      "kid": "v1-2026-04",
      "alg": "RS256",
      "use": "sig",
      "n": "...",
      "e": "AQAB"
    }
  ]
}

Use

Configure your credential broker or downstream verifier with this URL. For Vault: auth-jwt’s jwks_url. For Conjur: the authn-jwt service id’s jwks_uri.