Get A Tool
Returns a single tool registration, including the public key LTIAAS signs its ID Tokens with.
Path Parameters
The tool's ID, as returned at registration. This is also the tool's clientId.
- 200
- 401
- 403
- 404
Tool registration
Schema
JWK_SET—keyis a URL to the tool's JWKS. Preferred, because the tool can rotate keys without telling you.JWK_KEY—keyis a single JWK, as a JSON string.RSA_KEY—keyis a PEM-encoded public key.NONE— no name and no emailEMAIL— email onlyNAME— full, given and family nameCOMPLETE— name and email
Always equal to id. This is the value you pass as clientId when launching, and the value the tool knows itself by.
Identifies this deployment of the tool. Generated by LTIAAS at registration.
Falls back to launchEndpoint when none was registered.
authConfig object
How LTIAAS verifies messages signed by the tool.
Possible values: [JWK_SET, JWK_KEY, RSA_KEY]
The keyset URL, JWK or PEM key, depending on method.
Possible values: [MEMBERSHIPS_READ, LINEITEMS_READ, LINEITEMS_READ_WRITE, GRADES_READ, GRADES_WRITE, OUTCOMES_READ_WRITE, TOOL_SETTINGS_READ_WRITE]
Possible values: [NONE, EMAIL, NAME, COMPLETE]
How much personal data may be sent to the tool.
customParameters object
The public half of the key pair LTIAAS uses to sign this tool's ID Tokens. Also published in your keyset.
{
"id": "3wT7bVhgsve6byG33fVV",
"clientId": "3wT7bVhgsve6byG33fVV",
"deploymentId": "EgAssgssdfgsfshshq8iw",
"name": "Learning tool 1",
"launchEndpoint": "https://mytool.ltiaas.com/lti/launch",
"loginEndpoint": "https://mytool.ltiaas.com/lti/login",
"deeplinkingEndpoint": "https://mytool.ltiaas.com/lti/launch",
"redirectionUris": [
"https://mytool.ltiaas.com/lti/launch"
],
"authConfig": {
"method": "JWK_SET",
"key": "https://mytool.ltiaas.com/keys"
},
"permissions": [
"MEMBERSHIPS_READ",
"LINEITEMS_READ"
],
"personalData": "COMPLETE",
"customParameters": {},
"active": true,
"publicKey": "-----BEGIN PUBLIC KEY-----\n...\n-----END PUBLIC KEY-----\n"
}
The Authorization header was missing, malformed, or carried the wrong key.
Schema
details object
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
{
"status": 403,
"error": "Forbidden",
"details": {
"message": "INACTIVE_SERVICE",
"description": "string"
}
}
{
"status": 401,
"error": "Unauthorized",
"details": {
"message": "INVALID_BEARER_AUTHORIZATION_HEADER",
"description": "Invalid API Key for account."
}
}
The account is not permitted to use this endpoint — most often because it is an LTIAAS Launch account rather than a Connect one, or because a trial quota has been reached.
Schema
details object
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
{
"status": 403,
"error": "Forbidden",
"details": {
"message": "INACTIVE_SERVICE",
"description": "string"
}
}
{
"status": 403,
"error": "Forbidden",
"details": {
"message": "INVALID_ACCOUNT_TYPE"
}
}
No tool with that ID is registered on this account.
Schema
details object
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
Context for the failure. Always carries a message code; the other keys depend on what went wrong.
{
"status": 403,
"error": "Forbidden",
"details": {
"message": "INACTIVE_SERVICE",
"description": "string"
}
}
{
"status": 404,
"error": "Not Found",
"details": {
"message": "UNREGISTERED_TOOL"
}
}
