Get-ZrPublicKey
Retrieves the cluster's token-verification public key set — the signing key material that nodes rely on to validate the tokens callers present.
Syntax
Get-ZrPublicKey
[-Managers <string[]>] [-Port <int>] [-Token <string>] [-TimeoutSec <int>]
Description
Get-ZrPublicKey queries the first available manager and emits the SecurityPublicKeySet used to verify issued tokens. The private half of this key pair is the shared signing key created during Initialize-ZrSecurity; the public set returned here is what Enable-ZrStoreSecurity writes into node configs so nodes can validate callers. Use it to inspect or distribute the verification key material. Requires an active workspace or an explicit -Managers list.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
-Managers | string[] | No | Management Service endpoints (host, host:port, or URL) to target. When omitted, the active workspace's managers are used. |
-Port | int | No | Management Service port for bare-host managers. Default 7801. |
-Token | string | No | Admin bearer token for authenticated control-plane calls. |
-TimeoutSec | int | No | Per-request timeout in seconds. Default 30. |
Examples
Return the public key set that verifies tokens issued by the cluster.
Get-ZrPublicKey