---
title: "List Vault Keys"
method: GET
path: "/v1/vault/keys"
tags: ["Vault"]
---

# List Vault Keys

`GET /v1/vault/keys`

Fetches the mobile device's X25519 public key for end-to-end encrypting vault payloads. Requires the vault:store scope. The mobile app must have registered a key first.

## Response `200`

Default Response

- object
  - `success` boolean, required
  - `publicKey` string, required — Base64-encoded X25519 public key of the mobile device
  - `keyId` string — Optional identifier for the public key

## Other responses

- `401` — Default Response
- `403` — Default Response
- `404` — No vault public key registered yet

---

[API](https://skmtc.net/bkeyid/apis/bkey-api.md) · [All operations](https://skmtc.net/bkeyid/apis/bkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bkeyid/bkey-api/revisions/2c7566abec9e/schema)