OIDC JWKS API
JSON Web Key Set endpoint for token signature verification.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/oidc-jwks-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: OpenID Connect Authentication JWKS API
description: OpenID Connect (OIDC) is an identity layer built on top of the OAuth 2.0 protocol. It allows clients to verify the identity of end-users based on the authentication performed by an authorization server, and to obtain basic profile information about the end-user in an interoperable and REST-like manner. This specification covers the core OIDC endpoints including discovery, token, userinfo, and JWKS.
version: '1.0'
contact:
name: OpenID Foundation
url: https://openid.net/
license:
name: Apache 2.0
url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: https://{issuer}
description: OpenID Connect Provider
variables:
issuer:
default: example.com
description: The OIDC issuer domain
tags:
- name: JWKS
description: JSON Web Key Set endpoint for token signature verification.
paths:
/.well-known/jwks.json:
get:
operationId: getJwks
summary: JSON Web Key Set Endpoint
description: Returns the JSON Web Key Set (JWKS) containing the public keys used by the OpenID Provider to sign tokens. Clients use these keys to verify the signatures of ID tokens and other signed artifacts.
tags:
- JWKS
responses:
'200':
description: JSON Web Key Set containing the provider's public keys.
content:
application/json:
schema:
type: object
required:
- keys
properties:
keys:
type: array
description: Array of JSON Web Key objects.
items:
type: object
required:
- kty
- use
- kid
properties:
kty:
type: string
description: The key type (e.g., RSA, EC).
use:
type: string
description: The intended use of the key (sig or enc).
enum:
- sig
- enc
kid:
type: string
description: A unique identifier for the key.
alg:
type: string
description: The algorithm intended for use with the key.
n:
type: string
description: The modulus value for an RSA public key (Base64urlUInt-encoded).
e:
type: string
description: The exponent value for an RSA public key (Base64urlUInt-encoded).
x:
type: string
description: The x coordinate for an EC public key.
y:
type: string
description: The y coordinate for an EC public key.
crv:
type: string
description: The curve for an EC key.
x5c:
type: array
description: X.509 certificate chain.
items:
type: string
x5t:
type: string
description: X.509 certificate SHA-1 thumbprint.
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer Token obtained through OIDC authentication.