# getJwks

> Part of the MAP Audio Music API docs. Index of every page: https://map.audio/developers/music-api/llms.txt. OpenAPI document: https://map.audio/developers/music-api/openapi.json.

`GET https://api.map.audio/.well-known/jwks.json`

Get the provenance signing keys

The public keys (Ed25519, as JWKs) that sign provenance records; pick the one whose `kid` matches a record's. Public. Free.

Auth: none; this route is public. Not an MCP tool: Public keys for checking provenance; fetch them with a plain GET.

## Example

```sh
curl -sS "https://api.map.audio/.well-known/jwks.json" \
  -H "Map-Version: 2026-11-01"
```

### 200: One signing key

```json
{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "r7VbRk8sQ1mN4pT6yW2cE9hJ3uL5aF0dG7iK1oZ2qXs",
      "kid": "6c2f0a9d4b7e1358",
      "use": "sig",
      "alg": "EdDSA"
    }
  ]
}
```

### 500: Internal error

```json
{
  "error": {
    "type": "unavailable",
    "code": "internal_error",
    "message": "Something went wrong on our side; nothing was charged.",
    "param": null,
    "retryable": true,
    "jobId": null,
    "docUrl": "https://map.audio/developers/music-api/errors#internal_error",
    "requestId": "9a3f7c2e5b1d8f40-LHR"
  }
}
```

## Responses

- `200`: JWKS.
- `500`: Internal error
- `default`: Any other error: `error.code` names it, `error.param` the field at fault, and `error.docUrl` its entry in the error catalogue.