---
title: "List web tracking keys"
method: GET
path: "/web-tracking-keys"
tags: ["Web Tracking Keys"]
---

# List web tracking keys

`GET /web-tracking-keys`

Lists the publishable keys that let a website send on-site events (product views, cart activity, collection views, search) into this workspace. Each key includes a paste-ready install snippet and its origin allowlist. A key whose lastUsedAt is null has not successfully authenticated an event yet; it may be undeployed, have no instrumented traffic, or be sending requests rejected by its origin allowlist. Shopify stores use the storefront pixel instead. Requires the integrations:manage scope.

## Response `200`

Web tracking keys

- object
  - `success` boolean
  - `keys` WebTrackingKey[]
    - `id` string
    - `name` string
    - `publicKey` string — The publishable key, prefixed seq_pk_.
    - `allowedOrigins` string[] — Normalized origins allowed to use this key. Empty means any origin.
    - `isActive` boolean — False when revoked. Revoked keys are rejected at ingest.
    - `unrestricted` boolean — True when the allowlist is empty, so any site can send events with this key.
    - `lastUsedAt` string, date-time, nullable — When the key last authorized an event, or null if it never has. Updated at most every five minutes.
    - `createdAt` string, date-time
    - `updatedAt` string, date-time
    - `installSnippet` string — The exact script tag to paste into every page. Embeds both the key and the workspace id.
    - `endpoint` string — Ingest URL the SDK posts events to.
    - `warning` string — Present only when the key is unrestricted.

## Other responses

- `401` — Unauthorized
- `403` — API key is missing the integrations:manage scope

---

[API](https://skmtc.net/sequenzy/apis/sequenzy-api.md) · [All operations](https://skmtc.net/sequenzy/apis/sequenzy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sequenzy/sequenzy-api/revisions/8fbabe82a04d/schema)