Webhook Verification Key

Fetch the public key used to verify webhook signatures.

Request

POST /webhook_verification_key/get

Body

Response

200 OK

{
  "kid": "key_abc123",
  "kty": "EC",
  "crv": "P-256",
  "x": "...",
  "y": "..."
}

Notes

• This is a public endpoint — no API key required
• The kid is found in the JWT header of the webhook payload
• Keys use ES256 (ECDSA with P-256 and SHA-256)

Next steps

• Webhook Verification Guide — Full verification walkthrough