Keyset

GET /{tenantId}/.well-known/keylight-keys

The tenant’s trusted Ed25519 keyset, used to verify leases offline. Public — no auth, no productId.

curl

curl https://api.keylight.dev/acme/.well-known/keylight-keys

JavaScript

import { fetchKeyset, FetchTransport } from "@keylight-dev/js";

const keyset = await fetchKeyset(new FetchTransport(), "https://api.keylight.dev", "acme");
// keyset.primaryKid, keyset.keys  (kid -> base64 public key)

Response (200)

{
  "primary_kid": "k1",
  "keys": [
    { "kid": "k1", "alg": "ed25519", "public_key": "<raw ed25519 public key, base64>" }
  ]
}

Pin these keys or fetch them once, then verify each lease against keys[kid]. See Offline leases.