# Signing keys (JWKS)

Source: https://immiscible.fly.dev/docs/api/get-well-known-immiscible-keys-json

`GET /.well-known/immiscible-keys.json`

Every public key that signs receipts, checkpoints, profiles and reports, as a JWKS. Cacheable for five minutes; refetch when you meet an unknown `kid`. Keep a copy when you start relying on Immiscible: see [verifying offline](https://immiscible.fly.dev/docs/security/verifying-offline.md).

## Authentication

Public. No credential. Public routes are rate limited per address.

## Request

curl:

```bash
curl "https://immiscible.fly.dev/.well-known/immiscible-keys.json"
```

Node:

```ts
const res = await fetch('https://immiscible.fly.dev/.well-known/immiscible-keys.json', {
});
const data = await res.json();
console.log(res.status, data);
```

Python:

```python
import requests

res = requests.get(
    "https://immiscible.fly.dev/.well-known/immiscible-keys.json",
)
print(res.status_code, res.json())
```

## Response

```json
{ "keys": [{ "kty": "OKP", "crv": "Ed25519", "kid": "k_2026_09", "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo", "alg": "EdDSA" }] }
```