> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gnosispay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get PCI Public Key

> Returns the RSA-OAEP SHA-256 public key (Base64-encoded DER SPKI) used to
encrypt AES session keys, plus the same key in `encryptionKeys`. The client
wraps a one-time AES-256 session key with that key and sends its id as
`keyId`.



## OpenAPI

````yaml https://core.prod.gnosispay.com/user-api/openapi.json get /pci/public-key
openapi: 3.1.0
info:
  title: User Service
  version: 0.0.0
servers:
  - url: https://core.prod.gnosispay.com/user-api
    description: Production
    variables: {}
  - url: https://core.sandbox.gnosispay.in/user-api
    description: Sandbox
    variables: {}
security: []
tags:
  - name: Auth
  - name: User
  - name: Terms
  - name: Source of Funds
  - name: Phone
  - name: User Account
  - name: Cards
  - name: User Movements
  - name: KYC
  - name: PCI
  - name: 3DS
  - name: Health
paths:
  /pci/public-key:
    get:
      tags:
        - PCI
      summary: Get PCI Public Key
      description: >-
        Returns the RSA-OAEP SHA-256 public key (Base64-encoded DER SPKI) used
        to

        encrypt AES session keys, plus the same key in `encryptionKeys`. The
        client

        wraps a one-time AES-256 session key with that key and sends its id as

        `keyId`.
      operationId: PCI_getPublicKey
      parameters: []
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PciPublicKeyResponse'
        '401':
          description: Access is unauthorized.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Unauthorized'
        '404':
          description: The server cannot find the requested resource.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotFound'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - BearerAuth: []
components:
  schemas:
    PciPublicKeyResponse:
      type: object
      required:
        - publicKey
        - encryptionKeys
      properties:
        publicKey:
          type: string
          description: >-
            Base64-encoded DER (SPKI) of the RSA-OAEP SHA-256 public key. This
            is the

            same key as the matching `encryptionKeys` entry. Clients wrap the
            session

            key with that entry and send its id as `keyId`.
        encryptionKeys:
          type: array
          items:
            $ref: '#/components/schemas/PciEncryptionKey'
          description: >-
            RSA public keys a client may wrap a session key with. The client
            sends the

            chosen entry's id back as `keyId`.
    Unauthorized:
      type: object
      required:
        - success
        - error
      properties:
        success:
          type: boolean
          enum:
            - false
        error:
          type: string
    NotFound:
      type: object
      required:
        - success
        - error
      properties:
        success:
          type: boolean
          enum:
            - false
        error:
          type: string
    Error:
      type: object
      required:
        - success
        - error
      properties:
        success:
          type: boolean
          enum:
            - false
        error:
          type: string
    PciEncryptionKey:
      type: object
      required:
        - id
        - algorithm
        - publicKey
      properties:
        id:
          type: string
          description: >-
            Stable id the client sends back as `keyId` when it wraps with this
            key.
        algorithm:
          type: string
          description: >-
            OAEP algorithm this key expects. Clients match this when choosing a
            key.
        publicKey:
          type: string
          description: Base64-encoded DER (SPKI) RSA public key.
  securitySchemes:
    BearerAuth:
      type: http
      scheme: Bearer

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.