# Read the app context verification keys



URL: https://getclickfix.com/docs/api-reference/apps/read-the-app-context-verification-keys?lang=en

No authentication. The JSON Web Key Set that signs the context token an embedded app (iframe) receives from the panel. Verify the token's signature with the key whose `kid` matches; keys rotate, so cache the set briefly and refetch on an unknown `kid`. See the Build your own app guide.

This page is the API reference generated from the OpenAPI schema; request and response schemas, examples and curl/Node.js/Go/PHP requests are on the HTML page. Shared rules: https://getclickfix.com/docs/api.md?lang=en