List SP signing keys

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://openapi.logto.io/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Logto API references MCP server": {
    "url": "https://openapi.logto.io/mcp"
  }
}
Close
GET /api/sso-connectors/{id}/signing-keys
O auth2

List the Service Provider signing keys of the given SAML SSO connector. The response contains the certificate, fingerprints, activation state and expiry of each key — the private key is never returned.

Path parameters

  • id string Required

    The unique identifier of the sso connector.

Responses

  • 200 application/json

    The SP signing keys of the connector.

    Hide response attributes Show response attributes object
    • id string Required

      Minimum length is 1, maximum length is 21.

    • certificate string Required

      Minimum length is 1.

    • createdAt number Required
    • expiresAt number Required
    • active boolean Required
    • fingerprints object Required
      Hide fingerprints attribute Show fingerprints attribute object
      • sha256 object Required
        Hide sha256 attributes Show sha256 attributes object
        • formatted string Required
        • unformatted string Required
  • 400

    Bad Request

  • 401

    Unauthorized

  • 403

    Forbidden

  • 404

    The SSO connector is not found or is not a SAML connector.

GET /api/sso-connectors/{id}/signing-keys 
curl \
 --request GET 'https://[tenant_id].logto.app/api/sso-connectors/{id}/signing-keys' \
 --header "Authorization: Bearer $ACCESS_TOKEN"
Response examples (200) 
[
  {
    "id": "string",
    "certificate": "string",
    "createdAt": 42.0,
    "expiresAt": 42.0,
    "active": true,
    "fingerprints": {
      "sha256": {
        "formatted": "string",
        "unformatted": "string"
      }
    }
  }
]