cURL
curl --request GET \ --url https://api.bkey.id/v1/vault/keys \ --header 'Authorization: Bearer <token>'
{ "success": true, "publicKey": "<string>", "keyId": "<string>" }
Fetches the mobile device’s X25519 public key for end-to-end encrypting vault payloads. Requires the vault:store scope. The mobile app must have registered a key first.
EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA
Default Response
Base64-encoded X25519 public key of the mobile device
Optional identifier for the public key