---
search:
  tags:
    - Operations
    - GET
seo:
  description: >-
    Returns a JWK Set advertising the Ed25519 public key… Reference for the GET
    /.well-known/http-message-signatures-directory endpoint in the Charming API
    API.
sidebar:
  badge: GET
  label: Web Bot Auth signing-key directory (RFC 9421)
title: Web Bot Auth signing-key directory (RFC 9421)
type: openapi-operation
---
Returns a JWK Set advertising the Ed25519 public key Charming uses to sign outbound HTTP messages. Single-entry today: `{ keys: [{ kty: "OKP", crv: "Ed25519", kid, x, nbf, exp }] }`. `Content-Type: application/jwk-set+json`, `Cache-Control: public, max-age=600`. Storage v0: key is pinned via env vars or generated ephemerally per boot until `WEB_BOT_AUTH_PUBLIC_JWK`/`WEB_BOT_AUTH_KID`/`WEB_BOT_AUTH_NBF` are set on Railway.

<Operation source="reference" id="get-http-message-signatures-directory" />

Found a bug or need a feature? [Tell us](/docs/capabilities/feedback) with `submit_feedback` or `POST /app/{id}/feedback`. Your feedback shapes what we build next.