---
title: "List service account API keys"
method: GET
path: "/api/v0/service-accounts/{serviceAccountId}/api-keys"
tags: ["Service Accounts"]
---

# List service account API keys

`GET /api/v0/service-accounts/{serviceAccountId}/api-keys`

Returns all API keys for a service account, active and inactive. Each item carries `isRevoked`, `expiresAt`, and `revokedAt` so clients can split them into active/inactive views.

## Path parameters

- `serviceAccountId` string, required — Service account ID

## Response `200`

Response for status 200

- ListServiceAccountApiKeys200ResponseBody
  - `apiKeys` object[], required
    - `id` string, required — API key ID
    - `name` string, required — Human-readable name for the key
    - `fingerprint` string, required — Non-reversible suffix for display
    - `createdAt` number, required — Unix epoch milliseconds when the key was created
    - `expiresAt` number — Unix epoch milliseconds when the key expires, if set
    - `isRevoked` boolean, required — Whether the key has been revoked (soft-deleted)
    - `revokedAt` number — Unix epoch milliseconds when the key was revoked, if revoked

## Other responses

- `401` — Response for status 401
- `402` — Response for status 402
- `403` — Response for status 403
- `404` — Response for status 404
- `500` — Response for status 500

---

[API](https://skmtc.net/factory/apis/factory-public-api.md) · [All operations](https://skmtc.net/factory/apis/factory-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/factory/factory-public-api/revisions/34857551f3dc/schema)