Skip to main content

Public JWKS for verifying MCP OAuth JWTs (RFC 7517).

GET 
/.well-known/jwks.json

JWKS for the OAuth JWT signer.

Uses the container-wired PlatformJwtSigner so every Fargate task publishes the same kid / public key (the KMS-backed signer in prod is shared key material; only the in-process SPKI memo is per-task and is refreshed within minutes).

Responses​

Successful Response