# Generate a public key

Generates a public key used to create a JWE token for passing secure authentication data through non-PCI compliant intermediaries.

## POST

/end-to-end-keys

### Example Request

```shell
curl -X POST "https://api.moov.io/end-to-end-keys" \
  -H "Authorization: Bearer {token}" \
  -H "X-Moov-Version: v2026.07.00"
```

### Example Code Snippets

#### JavaScript
```typescript
import { Moov } from "@moovio/sdk";

const moov = new Moov({
  security: {
    username: "",
    password: "",
  },
});

async function run() {
  const result = await moov.endToEndEncryption.generateKey();

console.log(result);
}

run();
```

#### PHP
```php
declare(strict_types=1);

require 'vendor/autoload.php';

use Moov\/MoovPhp;
use Moov\MoovPhp\Models\Components;

$sdk = MoovPhp\Moov::builder()
    ->setSecurity(
        new Components\Security(
            username: '',
            password: '',
        )
    )
    ->build();

$response = $sdk->endToEndEncryption->generateKey(

);

if ($response->jsonWebKey !== null) {
    // handle response
}
```

#### Java
```java
package hello.world;

import io.moov.sdk.Moov;
import io.moov.sdk.models.components.Security;
import io.moov.sdk.models.operations.GenerateEndToEndKeyResponse;
import java.lang.Exception;

public class Application {

public static void main(String[] args) throws Exception {

Moov sdk = Moov.builder()
                .security(Security.builder()
                    .username("")
                    .password("")
                    .build())
            .build();

GenerateEndToEndKeyResponse res = sdk.endToEndEncryption().generateKey()
                .call();

if (res.jsonWebKey().isPresent()) {
            System.out.println(res.jsonWebKey().get());
        }
    }
}
```

#### Python
```python
from moovio_sdk import Moov
from moovio_sdk.models import components

with Moov(
    security=components.Security(
        username="",
        password="",
    ),
) as moov:

res = moov.end_to_end_encryption.generate_key()

# Handle response
    print(res)
```

#### Ruby
```ruby
require 'moov_ruby'

Models = ::Moov::Models
s = ::Moov::Client.new(
  security: Models::Components::Security.new(
    username: '',
    password: ''
  )
)
res = s.end_to_end_encryption.generate_key

unless res.json_web_key.nil?
  # handle response
end
```

#### C#
```csharp
using Moov.Sdk;
using Moov.Sdk.Models.Components;

var sdk = new MoovClient(security: new Security() {
    Username = "",
    Password = "",
});

var res = await sdk.EndToEndEncryption.GenerateKeyAsync();

// handle response
```

### Example Response

```json
{
  "alg": "ECDH-ES+A256KW",
  "crv": "P-521",
  "kid": "bOaoOIgm-7dI_gBIvsr0jQrPyYp6H_od0Ok-hSYZQ-g=",
  "kty": "EC",
  "use": "enc",
  "x": "ABcm3wzKpPzYYwjDC0HSrxxVM3ULbuMDUuzkR5wNciaMHkZvQ02gLFdqTL65evV7EWaQyC7zRc28eW20p5MVDdQr",
  "y": "AVa-eQsoiltOcQYy1QEcrQ9NbWktl_D4ewfg8diOZ2_svLEgEu4T1PqNcLbBGozP_VqPkXOMwNCUNI7pxajVGiIP"
}
```

### Response Headers

- A unique identifier used to trace requests.

### Rate Limiting

Request was refused due to rate limiting.

### API Versioning

Set this header to v2026.07.00 to use the API described in this specification. When omitted, the server defaults to v2024.01.00, which may not match the behavior documented here.

### Key Details
- **Possible values**: `v2026.07.00`
- **Describes an [RFC7517](https://datatracker.ietf.org/doc/html/rfc7517) web key.**

#### Key Attributes
- The cryptographic algorithm family used with the key (e.g., 'RSA', 'EC', 'oct').
- The algorithm intended for use with the key, e.g., 'RS256' or 'ES256'.
- The curve for Elliptic Curve keys, e.g., 'P-256', 'P-384', or 'P-521'. This field is required when `kty` is 'EC'.
- The exponent value for RSA keys. This field is required when `kty` is 'RSA'.
- The permitted operations for the key, e.g., 'sign', 'verify', 'encrypt', 'decrypt'.
- A unique identifier for the key.
- The modulus value for RSA keys. This field is required when `kty` is 'RSA'.
- The intended use of the key: 'sig' for signature, 'enc' for encryption.
- **Possible values**: `sig`, `enc`
- The x coordinate for Elliptic Curve keys. This field is required when `kty` is 'EC'.
- The y coordinate for Elliptic Curve keys. This field is required when `kty` is 'EC'.