Preview

Get credential owner JWKS

GET
/credential-owners/{ownerAccountID}/jwks.json

Return the public keys receivers fetch to verify Moov Money client assertions. The set contains only the owner’s active and next public keys. The response uses Content-Type: application/json and includes Cache-Control: public, max-age=<seconds>; Moov Money configures the cache lifetime, up to 300 seconds. This route does not require authentication.

Returns 200 with the JWKS. An unknown owner account returns an empty key set; a malformed owner account ID returns 404.

Request
cURL
curl -X GET https://api.moov.money/credential-owners/{ownerAccountID}/jwks.json \
  -u "$MOOV_API_KEY_ID:$MOOV_API_KEY_SECRET" \
  -H "X-Moov-Version: v2026.10.00"
Responses
200 404
Successful JWKS response. The cache lifetime is set by Moov Money.
The requested resource was not found.

Headers

X-Moov-Version

string
Set this header to the API version being targeted (e.g. v2026.10.00). When omitted, the server applies its default version.

Path parameters

ownerAccountID

string required
Moov account ID.

Response

The public signing keys for one credential owner.

keys

array required
The owner’s active and next public keys. Retired keys are omitted.