Decrypt a JWE General JSON Serialization payload

post

https://staging.ankatech.co/api/v3/crypto/decrypt

Parses and decrypts the given JWE using the private key
identified by the kid in its protected header.
Returns the plaintext (Base64-encoded) plus metadata about key
selection, algorithm, and any warnings.

Uses JWE General JSON Serialization (RFC 7516 §7.2) uniformly —
single-recipient for SIMPLE keys, multi-recipient for COMPOSITE
hybrid keys.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

Language

Credentials

Bearer

JWT

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200Data decrypted successfully.

400Bad Request: • Malformed Base64 or missing/blank JWE header 'kid', OR • Key does not support the requested operation (e.g., trying to decrypt with an encrypt-only key)

401Unauthorized: missing or invalid JWT token.

404Not Found: specified key does not exist or lacks a private component.

409Conflict: key is in an invalid state (e.g. revoked or suspended).

413Payload Too Large: plaintext exceeds the configured maximum size after decryption.

422Unprocessable Entity: JWE Compact serialization is malformed.

500Internal Server Error: unexpected error during decryption.

503Service Unavailable: the tenant's key-protection backend is bound but not currently usable. Transient - retry after the Retry-After interval. The body is oracle-safe and names no backend, token, slot, PIN or vendor.