Webhook verification keys

GET

/v1/webhooks/jwks.json

Serves the public keys you verify webhook delivery signatures against.

Every delivery carries an x-rk1-signature header: a compact ES256 JWT whose claims bind the run id, eventId, event type and a bodySha256 of the payload, inside a 5-minute exp window. Verify the signature with these keys and compare bodySha256 to the body you received.

This route needs no authentication — key material is public by definition. It is the stable alias, serving the same keys as the older /process/jwks.json.

Learn more: Webhooks guide

Serves the public keys you verify webhook delivery signatures against. Every delivery carries an `x-rk1-signature` header: a compact ES256 JWT whose claims bind the run id, `eventId`, event `type` and a `bodySha256` of the payload, inside a 5-minute `exp` window. Verify the signature with these keys and compare `bodySha256` to the body you received. This route needs no authentication — key material is public by definition. It is the stable alias, serving the same keys as the older `/process/jwks.json`. **Learn more:** [Webhooks guide](https://docs.cloudraker.com/developers/webhooks)

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Response

JSON Web Key Set (public keys only).

keyslist of objects

1	{
2	"keys": [
3	{
4	"kty": "EC",
5	"crv": "P-256",
6	"x": "f83OJ3D2xF4v7Q1X9Z9v5Q6v7X9Y2Z3A4B5C6D7E8F9G0H1I2J3K4L5M6N7O8P9Q",
7	"y": "x_FEzRu9v1X2Y3Z4A5B6C7D8E9F0G1H2I3J4K5L6M7N8O9P0Q1R2S3T4U5V6W7X8Y",
8	"kid": "2024-06-01-cloudraker-webhook-key-1",
9	"alg": "ES256",
10	"use": "sig"
11	}
12	]
13	}