Auth0 Management API — Keys

naftiko: 1.0.0-alpha2
info:
  label: "Auth0 Management API \u2014 Keys"
  description: Auth0 Management API capability covering the Keys resource group (9 paths). Self-contained Naftiko capability covering one Auth0
    Management surface. 14 operations.
  tags:
  - Auth0
  - Management API
  - Keys
  created: '2026-05-22'
  modified: '2026-05-22'
binds:
- namespace: env
  keys:
    AUTH0_DOMAIN: AUTH0_DOMAIN
    AUTH0_MGMT_TOKEN: AUTH0_MGMT_TOKEN
capability:
  consumes:
  - type: http
    namespace: auth0-management-keys
    baseUri: https://{AUTH0_DOMAIN}/api/v2
    description: "Auth0 Management API \u2014 Keys resource group. Self-contained."
    resources:
    - name: keys-custom-signing
      path: /keys/custom-signing
      operations:
      - name: get_custom_signing_keys
        method: GET
        description: Get Custom Signing Keys
        outputRawFormat: json
      - name: delete_custom_signing_keys
        method: DELETE
        description: Delete Custom Signing Keys
        outputRawFormat: json
      - name: put_custom_signing_keys
        method: PUT
        description: Create or Replace Custom Signing Keys
        outputRawFormat: json
    - name: keys-encryption
      path: /keys/encryption
      operations:
      - name: get_encryption_keys
        method: GET
        description: Get All Encryption Keys
        outputRawFormat: json
      - name: post_encryption
        method: POST
        description: Create the New Encryption Key
        outputRawFormat: json
    - name: keys-encryption-rekey
      path: /keys/encryption/rekey
      operations:
      - name: post_encryption_rekey
        method: POST
        description: Rekey the Key Hierarchy
        outputRawFormat: json
    - name: keys-encryption-kid
      path: /keys/encryption/{kid}
      operations:
      - name: get_encryption_key
        method: GET
        description: Get the Encryption Key by Its Key Id
        outputRawFormat: json
      - name: delete_encryption_key
        method: DELETE
        description: Delete the Encryption Key by Its Key Id
        outputRawFormat: json
      - name: post_encryption_key
        method: POST
        description: Import the Encryption Key
        outputRawFormat: json
    - name: keys-encryption-kid-wrapping-key
      path: /keys/encryption/{kid}/wrapping-key
      operations:
      - name: post_encryption_wrapping_key
        method: POST
        description: Create the Public Wrapping Key
        outputRawFormat: json
    - name: keys-signing
      path: /keys/signing
      operations:
      - name: get_signing_keys
        method: GET
        description: Get All Application Signing Keys
        outputRawFormat: json
    - name: keys-signing-rotate
      path: /keys/signing/rotate
      operations:
      - name: post_signing_keys
        method: POST
        description: Rotate the Application Signing Key
        outputRawFormat: json
    - name: keys-signing-kid
      path: /keys/signing/{kid}
      operations:
      - name: get_signing_key
        method: GET
        description: Get an Application Signing Key by Its Key Id
        outputRawFormat: json
    - name: keys-signing-kid-revoke
      path: /keys/signing/{kid}/revoke
      operations:
      - name: put_signing_keys
        method: PUT
        description: Revoke an Application Signing Key by Its Key Id
        outputRawFormat: json