JSON Web Key (JWK) inspector — validate bounded public RSA, EC, or Ed25519 keys and calcul
JSON Web Key (JWK) inspector — validate bounded public RSA, EC, or Ed25519 keys and calculate RFC 7638 SHA-256 thumbprints without ownership or trust claims.
5000 (raw units)
price
2
calls / 30d
1
unique payers
2026-09-15
updated
Provider
artifact-inspector.use.x402atlas.com · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:137",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:42161",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "5000",
"maxTimeoutSeconds": 300
}
]Output schema
{
"bazaar": {
"category": "utilities",
"info": {
"input": {
"body": {
"jwk": {
"alg": "RS256",
"e": "AQAB",
"key_ops": [
"verify"
],
"kid": "2011-04-29",
"kty": "RSA",
"n": "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw",
"use": "sig"
}
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"algorithm_version": "rfc7638-public-jwk-inspect-v1",
"key_count": 1,
"keys": [
{
"alg": "RS256",
"bits": 2048,
"curve": "",
"key_ops": [
"verify"
],
"kid": "2011-04-29",
"kty": "RSA",
"thumbprint_sha256": "NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs",
"use": "sig",
"warnings": []
}
],
"kind": "single",
"operation": "jwk-inspect",
"warnings": [
"JWK metadata and thumbprints do not establish protocol suitability, key ownership, identity, or trust."
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"jwk": {
"additionalProperties": false,
"description": "One supported public signing JWK with no private material",
"oneOf": [
{
"not": {
"anyOf": [
{
"required": [
"crv"
]
},
{
"required": [
"x"
]
},
{
"required": [
"y"
]
}
]
},
"properties": {
"kty": {
"const": "RSA"
}
},
"required": [
"n",
"e"
]
},
{
"not": {
"anyOf": [
{
"required": [
"n"
]
},
{
"required": [
"e"
]
}
]
},
"properties": {
"kty": {
"const": "EC"
}
},
"required": [
"crv",
"x",
"y"
]
},
{
"not": {
"anyOf": [
{
"required": [
"n"
]
},
{
"required": [
"e"
]
},
{
"required": [
"y"
]
}
]
},
"properties": {
"kty": {
"const": "OKP"
}
},
"required": [
"crv",
"x"
]
}
],
"properties": {
"alg": {
"description": "Optional advertised signing algorithm, checked for key compatibility but not endorsed",
"type": "string"
},
"crv": {
"description": "EC or OKP curve",
"enum": [
"P-256",
"P-384",
"P-521",
"Ed25519"
],
"type": "string"
},
"e": {
"description": "RSA exponent as canonical base64urlUInt",
"type": "string"
},
"key_ops": {
"description": "Optional singleton verify operation",
"items": {
"const": "verify",
"description": "Public verification operation",
"type": "string"
},
"maxItems": 1,
"minItems": 1,
"type": "array"
},
"kid": {
"description": "Optional nonempty public key identifier; unique within a set",
"maxLength": 128,
"minLength": 1,
"type": "string"
},
"kty": {
"description": "Supported public key type",
"enum": [
"RSA",
"EC",
"OKP"
],
"type": "string"
},
"n": {
"description": "RSA modulus as canonical base64urlUInt",
"type": "string"
},
"use": {
"const": "sig",
"description": "Optional signing-key use",
"type": "string"
},
"x": {
"description": "Canonical base64url x coordinate or Ed25519 public bytes",
"type": "string"
},
"x5c": {
"description": "Untrusted certificate strings; never parsed or trusted",
"items": {
"description": "Base64 certificate metadata",
"type": "string"
},
"maxItems": 8,
"type": "array"
},
"x5t": {
"description": "Untrusted SHA-1 certificate thumbprint metadata",
"type": "string"
},
"x5t#S256": {
"description": "Untrusted SHA-256 certificate thumbprint metadata",
"type": "string"
},
"x5u": {
"description": "Untrusted certificate URL metadata; never fetched",
"type": "string"
},
"y": {
"description": "Canonical base64url EC y coordinate",
"type": "string"
}
},
"required": [
"kty"
],
"type": "object"
}
},
"required": [
"jwk"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"_atlas": {
"additionalProperties": false,
"description": "Atlas documentation and related-route metadata added after deployment",
"properties": {
"docs": {
"description": "Documentation URL for this bridge",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"related": {
"description": "Bounded related Atlas routes",
"items": {
"additionalProperties": false,
"description": "One related Atlas route",
"properties": {
"bridge": {
"description": "Related bridge name",
"maxLength": 64,
"type": "string"
},
"docs": {
"description": "Related bridge documentation URL",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"summary": {
"description": "Short capability summary",
"maxLength": 256,
"type": "string"
},
"url": {
"description": "Related route URL",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"bridge",
"url",
"docs",
"summary"
],
"type": "object"
},
"maxItems": 3,
"type": "array"
}
},
"required": [
"docs"
],
"type": "object"
},
"algorithm_version": {
"const": "rfc7638-public-jwk-inspect-v1",
"description": "Pinned public JWK and thumbprint contract",
"type": "string"
},
"key_count": {
"description": "Number of validated public keys",
"maximum": 32,
"minimum": 1,
"type": "integer"
},
"keys": {
"description": "Normalized public key metadata and thumbprints",
"items": {
"additionalProperties": false,
"description": "Normalized validated public JWK metadata",
"properties": {
"alg": {
"description": "Compatible advertised algorithm or empty; not a security endorsement",
"type": "string"
},
"bits": {
"description": "Validated public key or curve bit size",
"maximum": 8192,
"minimum": 256,
"type": "integer"
},
"curve": {
"description": "Validated curve or empty for RSA",
"type": "string"
},
"key_ops": {
"description": "Validated public operations",
"items": {
"description": "verify operation",
"type": "string"
},
"maxItems": 1,
"type": "array"
},
"kid": {
"description": "Public key identifier or empty",
"type": "string"
},
"kty": {
"description": "Validated key type",
"type": "string"
},
"thumbprint_sha256": {
"description": "RFC 7638 SHA-256 JWK Thumbprint in base64url form",
"pattern": "^[A-Za-z0-9_-]{43}$",
"type": "string"
},
"use": {
"description": "Validated sig use or empty",
"type": "string"
},
"warnings": {
"description": "Key-local certificate URL/chain handling warnings",
"items": {
"description": "Human-readable warning",
"type": "string"
},
"maxItems": 8,
"type": "array"
}
},
"required": [
"kty",
"kid",
"use",
"key_ops",
"alg",
"curve",
"bits",
"thumbprint_sha256",
"warnings"
],
"type": "object"
},
"maxItems": 32,
"minItems": 1,
"type": "array"
},
"kind": {
"description": "Selected request branch",
"enum": [
"single",
"set"
],
"type": "string"
},
"operation": {
"const": "jwk-inspect",
"description": "Stable operation name",
"type": "string"
},
"warnings": {
"description": "Route-level trust and suitability limitations",
"items": {
"description": "Human-readable warning",
"type": "string"
},
"maxItems": 8,
"type": "array"
}
},
"required": [
"operation",
"algorithm_version",
"kind",
"key_count",
"keys",
"warnings"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
},
"tags": [
"jwk-inspect",
"json-web-key",
"public-key",
"rfc7638",
"thumbprint"
]
}
}Use it
curl
curl "https://artifact-inspector.use.x402atlas.com/jwk" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://artifact-inspector.use.x402atlas.com/jwk");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://artifact-inspector.use.x402atlas.com/jwk")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/3451.json, and this resource appears in /discovery/resources and /discovery/search.