Get signing key status

GET

/api/admin/signing-keys/status

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/admin/signing-keys/status \
  --header 'Authorization: Bearer <token>'

Returns active, overlap, and revoked signing key state from the tenant key manager.

Authorizations

• adminBearer
• adminSessionCookie

Responses

200

Signing key status from the tenant key manager.

Media type application/json

object

activeKeyId

string | null

keys

Array<object>

object

kid

string

status

string

createdAt

integer | string

expiresAt

integer | string | null

key

additional properties

overlapKeys

Array<object>

object

kid

string

status

string

createdAt

integer | string

expiresAt

integer | string | null

key

additional properties

revokedKeys

Array<object>

object

kid

string

status

string

createdAt

integer | string

expiresAt

integer | string | null

key

additional properties

key

additional properties

Example

{
  "activeKeyId": "kid_2026_06",
  "keys": [
    {
      "kid": "kid_2026_06",
      "status": "active",
      "createdAt": "2026-06-01T00:00:00.000Z"
    },
    {
      "kid": "kid_2026_05",
      "status": "overlap",
      "createdAt": "2026-05-01T00:00:00.000Z"
    }
  ]
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}