/.well-known/jwks.jsonAS public signing keys (JWKS)
The AS's RS256 public keys. The MCP server verifies access tokens against these (it holds no signing secret). Access tokens are RS256 JWTs with `iss`, `aud` (the canonical resource), `sub` (user uuid), `scope: mcp`, `token_use: mcp_access`, short `exp` (≤15 min), and `kid`.
free
Response schema
| Field | Type | Nullable | Description |
|---|---|---|---|
| keys | array | no | The JSON Web Key Set — an array of the AS's public signing keys (JWK objects). A verifier picks the key whose `kid` matches the token header. |
| keys[].kty | string | no | Key type. Always `RSA`. |
| keys[].n | string | no | RSA modulus, base64url-encoded (the public-key material). |
| keys[].e | string | no | RSA public exponent, base64url-encoded. |
| keys[].use | string | no | Public-key use. Always `sig` (signature verification). |
| keys[].alg | string | no | Signing algorithm. Always `RS256`. |
| keys[].kid | string | no | Key ID. Matched against the access-token header's `kid` to select the verifying key. |
Errors
| Status | Label | Description |
|---|---|---|
| 200 | OK | Request succeeded. |
| 400 | Bad Request | Invalid query, body, or path parameter. |
| 401 | Unauthorized | Missing or invalid Authorization header / api_Token. |
| 402 | Payment Required | Insufficient token balance for this call. Top up |
| 429 | Too Many Requests | Rate limit exceeded for your tier (see /pricing for tier limits). Tier limits |
| 500 | Server Error | Unexpected server-side failure. Retry with backoff; report if persistent. |
Code samples
curl "https://api.finradar.ai/.well-known/jwks.json" \
-H "Authorization: Bearer YOUR_JWT_TOKEN"Generate an API key in /account/credentials to run live queries (literal YOUR_API_KEY placeholder shown until then).