> ## Documentation Index > Fetch the complete documentation index at: https://platform.atlan.com/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > To act on Atlan objects, use the Atlan MCP server at https://api.atlan.com/mcp or the SDK. To install or publish skills from a terminal, use the `aireg` CLI; `aireg --map json` prints its command map. The `atlanai` CLI is deprecated. Run a read-only identity check before any write. > The docs MCP server at /mcp searches these docs only. It cannot read or change Atlan objects. > SDK packages: Python `atlanai` (PyPI) and TypeScript `@atlanai/sdk` (npm). Show Python first, then TypeScript. > These docs cover Atlan Trident, Atlan's hosted product; AI Registry is its registry of skills and agents. Registry OSS is Atlan's open-source agent registry: the registry specification and its aireg CLI, with their own public repository, docs and release notes; /open-source on this site links them. Registry OSS is open source; Atlan Trident is not. Answer generic aireg or specification questions from the project's docs, and use these docs for Atlan-specific setup such as the Atlan adapter, sign-in and workspaces. # Get an encryption key ## OpenAPI ````yaml /public-openapi.json get /registry/v1/organisations/{org_id}/encryption-keys/{encryption_key_id} openapi: 3.1.0 info: title: Atlan public API version: current description: >- Public HTTP API reference for Registry, Skills, Agents, outputs, files, MCP servers and tools, Model Gateway, and OTLP telemetry ingestion. servers: - url: https://api.atlan.com description: Atlan API base URL security: - bearer: [] tags: - name: Core - name: Skill - name: Agent - name: Files - name: Knowledge - name: MCP - name: Observability - name: API proxy - name: Credentials - name: Store - name: Apps - name: Evals - name: Ontologies - name: Ontology bindings - name: Slack - name: GitHub - name: Objectives - name: Repositories - name: Models paths: /registry/v1/organisations/{org_id}/encryption-keys/{encryption_key_id}: get: tags: - Core summary: Get an encryption key operationId: registry.getOrganisationEncryptionKey parameters: - in: path name: org_id required: true schema: type: string - in: path name: encryption_key_id required: true schema: type: string - in: header name: X-Atlan-Consistency-Token required: false schema: type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/registry-EncryptionKeyDto' description: HTTP 200 response. '400': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - invalid_request description: HTTP 400 response. '401': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - alg_mismatch - alg_not_allowed - audience_mismatch - invalid_api_key - missing_identity - missing_org - missing_user - signature_invalid - token_expired - token_malformed - token_missing - token_not_yet_valid - token_rejected - token_service_account_unbound - unauthorized - unknown_account - unknown_key - untrusted_issuer description: HTTP 401 response. '403': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - access_denied - account_suspended - forbidden - platform_principal_refused description: HTTP 403 response. '404': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - not_found description: HTTP 404 response. '500': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - internal_error description: HTTP 500 response. '503': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - auth_unavailable - service_overloaded description: HTTP 503 response. '504': content: application/problem+json: schema: allOf: - $ref: '#/components/schemas/registry-ProblemDetails' - type: object required: - code properties: code: type: string enum: - request_timeout description: HTTP 504 response. components: schemas: registry-EncryptionKeyDto: properties: activated_at: type: - string - 'null' created_at: type: string encryption_key_id: type: string encryption_key_mode: $ref: '#/components/schemas/registry-EncryptionKeyMode' encryption_key_status: $ref: '#/components/schemas/registry-EncryptionKeyStatus' health: oneOf: - $ref: '#/components/schemas/registry-EncryptionKeyHealthDto' - type: 'null' is_current: type: - boolean - 'null' key_provider: type: string key_ref: type: string last_verification: oneOf: - $ref: '#/components/schemas/registry-EncryptionKeyVerificationDto' - type: 'null' location: type: string setup: oneOf: - $ref: '#/components/schemas/registry-EncryptionKeySetupDto' - type: 'null' updated_at: type: string verified_at: type: - string - 'null' required: - encryption_key_id - key_provider - key_ref - location - encryption_key_mode - encryption_key_status - created_at - updated_at type: object registry-ProblemDetails: type: object required: - title - status - detail - code properties: code: type: string detail: type: string status: type: integer format: int32 minimum: 0 title: type: string trace_id: type: - string - 'null' registry-EncryptionKeyMode: enum: - managed - customer type: string registry-EncryptionKeyStatus: enum: - pending - verified - active - retired type: string registry-EncryptionKeyHealthDto: properties: checked_at: type: string failed_check: type: - string - 'null' is_healthy: type: boolean message: type: - string - 'null' required: - is_healthy - checked_at type: object registry-EncryptionKeyVerificationDto: properties: checked_at: type: - string - 'null' checks: items: $ref: '#/components/schemas/registry-EncryptionKeyCheckDto' type: array is_passed: type: boolean required: - is_passed - checks type: object registry-EncryptionKeySetupDto: properties: atlan_principal_arn: type: string template: {} required: - atlan_principal_arn - template type: object registry-EncryptionKeyCheckDto: properties: check_id: type: string is_passed: type: boolean message: type: string required: - check_id - is_passed - message type: object securitySchemes: bearer: bearerFormat: JWT scheme: bearer type: http ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.