For reading and verification only. You may not copy, use, modify or redistribute this code. Full notice on the main page.
contracts/schemas/jwks.schema.json
| 1 | { |
| 2 | "$schema": "https://json-schema.org/draft/2020-12/schema", |
| 3 | "$id": "https://all-mcp.fyi/contracts/v2/jwks.schema.json", |
| 4 | "title": "The control plane's published keys (GET /.well-known/device-jwks.json, 1.1 shape). The node pins the issuer, caches 300 s, reloads on an unknown kid, accepts at most 16 keys and fails closed after 30 minutes without a refresh (policy.jwks).", |
| 5 | "type": "object", |
| 6 | "required": ["keys"], |
| 7 | "additionalProperties": false, |
| 8 | "properties": { |
| 9 | "keys": { |
| 10 | "type": "array", "minItems": 1, "maxItems": 16, |
| 11 | "items": { |
| 12 | "type": "object", |
| 13 | "required": ["kty", "crv", "x", "kid", "alg", "use", "key_ops"], |
| 14 | "additionalProperties": false, |
| 15 | "properties": { |
| 16 | "kty": {"const": "OKP"}, |
| 17 | "crv": {"const": "Ed25519"}, |
| 18 | "x": {"type": "string", "pattern": "^[A-Za-z0-9_-]{43}$"}, |
| 19 | "kid": {"$ref": "common.schema.json#/$defs/kid"}, |
| 20 | "alg": {"const": "EdDSA"}, |
| 21 | "use": {"const": "sig"}, |
| 22 | "key_ops": {"type": "array", "minItems": 1, "maxItems": 1, "items": {"const": "verify"}} |
| 23 | } |
| 24 | } |
| 25 | } |
| 26 | } |
| 27 | } |