Skip to main content
Get VAPID Public Key
Returns the VAPID (Voluntary Application Server Identification) public key for this project. The browser’s PushManager.subscribe() requires this key as applicationServerKey when creating a Web Push subscription. This endpoint is intentionally unauthenticated — a VAPID public key is not a secret (only the matching private key, which is never returned by any endpoint, provides security). The webPushTokenAdapter calls this automatically before the user has signed in, which is a common browser pattern. Returns { publicKey: null } if the web-push provider has not been configured for the project. Requires the push bundle.

Response

string | null
The Base64url-encoded VAPID public key, or null if Web Push is not configured.

Error Responses

Returned while the push bundle is mid-install. Retry shortly.
Rate limit: 50 requests per 5 minutes per IP. Exceeding it returns 429 with a plain-text message and no code.

See Also