Read the app context verification keys

GET

/v1/app-context/jwks

No authentication. The JSON Web Key Set that signs the context token an embedded app (iframe) receives from the panel. Verify the token's signature with the key whose kid matches; keys rotate, so cache the set briefly and refetch on an unknown kid. See the Build your own app guide.

Response Body

Success

application/json

response

success*boolean

data*

meta*

Example Request

curl -X GET 'https://api.getclickfix.com/v1/app-context/jwks'

Example Request

curl -X GET 'https://api.getclickfix.com/v1/app-context/jwks'

Example ResponseSchema

{
  "success": true,
  "data": {
    "keys": [
      {
        "kty": "OKP",
        "crv": "Ed25519",
        "kid": "2026-11-a",
        "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
        "use": "sig",
        "alg": "EdDSA"
      }
    ]
  },
  "meta": {
    "request_id": "01JCK9ZQ3M8R2W7X5E4T1N0PAB"
  }
}

{  "success": true,  "data": {    "keys": [      {        "kty": "OKP",        "crv": "Ed25519",        "kid": "2026-11-a",        "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",        "use": "sig",        "alg": "EdDSA"      }    ]  },  "meta": {    "request_id": "01JCK9ZQ3M8R2W7X5E4T1N0PAB"  }}

Read the app context verification keys

Response BodyCopy Anchor Link

Response Body