insumer_jwks
Retrieve InsumerAPI's ECDSA P-256 public signing key via JWKS to verify attestation signatures dynamically without hardcoding the key. No authentication required.
Instructions
Get the JWKS (JSON Web Key Set) containing InsumerAPI's ECDSA P-256 public signing key. Use this to verify attestation signatures without hardcoding the key. The kid field in attestation responses identifies which key signed the response. No authentication required.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/index.ts:159-170 (handler)The actual handler for the 'insumer_jwks' tool. It fetches the JWKS (JSON Web Key Set) from the InsumerAPI endpoint and returns it as JSON. No authentication or parameters required.
server.tool( "insumer_jwks", "Get the JWKS (JSON Web Key Set) containing InsumerAPI's ECDSA P-256 public signing key. Use this to verify attestation signatures without hardcoding the key. The kid field in attestation responses identifies which key signed the response. No authentication required.", {}, async () => { const res = await fetch(`${API_BASE}/jwks`); const data = await res.json(); return { content: [{ type: "text" as const, text: JSON.stringify(data, null, 2) }], }; } ); - src/index.ts:159-162 (schema)Schema definition for the insumer_jwks tool. It takes an empty object (no parameters) and has a description string explaining its purpose.
server.tool( "insumer_jwks", "Get the JWKS (JSON Web Key Set) containing InsumerAPI's ECDSA P-256 public signing key. Use this to verify attestation signatures without hardcoding the key. The kid field in attestation responses identifies which key signed the response. No authentication required.", {}, - src/index.ts:159-170 (registration)Registration of the 'insumer_jwks' tool via server.tool() on the McpServer instance. The tool name, description, empty schema, and handler are all registered here.
server.tool( "insumer_jwks", "Get the JWKS (JSON Web Key Set) containing InsumerAPI's ECDSA P-256 public signing key. Use this to verify attestation signatures without hardcoding the key. The kid field in attestation responses identifies which key signed the response. No authentication required.", {}, async () => { const res = await fetch(`${API_BASE}/jwks`); const data = await res.json(); return { content: [{ type: "text" as const, text: JSON.stringify(data, null, 2) }], }; } );