> ## Documentation Index
> Fetch the complete documentation index at: https://docs.phala.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get app encryption pubkey

> Retrieve the public key for encrypting environment variables before deployment.



## OpenAPI

````yaml /openapi.json get /api/v1/kms/{kms_id}/pubkey/{app_id}
openapi: 3.1.0
info:
  title: Phala Cloud API
  version: 0.1.0
servers:
  - url: https://cloud-api.phala.com
security: []
tags:
  - name: CVMs
    description: Confidential Virtual Machine (CVM) lifecycle management on Phala Network
  - name: Apps
    description: App template management and CVM deployment from app blueprints
  - name: Webhooks
    description: Manage webhook endpoints and monitor delivery history
  - name: SSH Keys
    description: SSH public key management for CVM access
  - name: KMS
    description: >-
      Key Management Service — key derivation, on-chain anchoring, and
      inspection
  - name: Instance Types
    description: Available hardware configurations for CVM deployment
  - name: Attestations
    description: Remote attestation and TEE verification endpoints
paths:
  /api/v1/kms/{kms_id}/pubkey/{app_id}:
    get:
      tags:
        - KMS
      summary: Get app encryption pubkey
      description: >-
        Retrieve the public key for encrypting environment variables before
        deployment.
      operationId: get_app_env_encrypt_pubkey_api_v1_kms__kms_id__pubkey__app_id__get
      parameters:
        - name: app_id
          in: path
          required: true
          schema:
            type: string
            description: 40-character hex string, with or without 0x prefix
            title: App Id
          description: 40-character hex string, with or without 0x prefix
        - name: kms_id
          in: path
          required: true
          schema:
            type: string
            description: KMS ID (hashed) or slug
            title: Kms Id
          description: KMS ID (hashed) or slug
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '400':
          description: Invalid app ID format
        '404':
          description: KMS not found
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '500':
          description: KMS connection or internal error
components:
  schemas:
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError

````