> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/dsx-exchange/llms.txt.
> For full documentation content, see https://docs.nvidia.com/dsx-exchange/llms-full.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/dsx-exchange/_mcp/server.

# Publish Pub Keyset

Publish one JWK for the given tenant and kid. Publishers (e.g. SPIRE) use this to advertise a public key for verification or encryption.

**Direction:** Publish (send)

## Channel

```text
spiffe-exchange/v1/pub-keysets/tenant/{tenant_domain}/kid/{kid}
```

### Parameters

| Parameter       | Description                                                      |
| --------------- | ---------------------------------------------------------------- |
| `tenant_domain` | Tenant domain identifier (e.g. tenant namespace or domain name). |
| `kid`           | Key ID (kid) for this key; aligns with JWS/JWE header kid.       |

## Message: JWK (RFC 7517)

**Content Type:** `application/json`

### Payload

| Name      | Type              | Required | Description                                                 |
| --------- | ----------------- | -------- | ----------------------------------------------------------- |
| `kty`     | string            | Yes      | Key type (e.g. RSA, EC, OKP). Values: `RSA`, `EC`, `OKP`    |
| `use`     | string            | No       | Public key use (sig, enc, or omitted). Values: `sig`, `enc` |
| `key_ops` | array\<string> | No       | Key operations (e.g. verify, encrypt).                      |
| `alg`     | string            | No       | Algorithm (e.g. ES256, RS256, EdDSA).                       |
| `kid`     | string            | No       | Key ID; should match the topic kid when present.            |
| `n`       | string            | No       | RSA modulus (Base64url).                                    |
| `e`       | string            | No       | RSA public exponent (Base64url).                            |
| `crv`     | string            | No       | Elliptic curve (e.g. P-256, P-384).                         |
| `x`       | string            | No       | EC x coordinate (Base64url).                                |
| `y`       | string            | No       | EC y coordinate (Base64url).                                |

```json
{
  "kty": "RSA",
  "use": "sig",
  "key_ops": [
    "string"
  ],
  "alg": "string",
  "kid": "string",
  "n": "string",
  "e": "string",
  "crv": "string",
  "x": "string",
  "y": "string"
}
```