---
title: "List all keys for a bound device"
method: GET
path: "/v1/mfa/devices/{id}/keys"
tags: ["Device binding"]
---

# List all keys for a bound device

`GET /v1/mfa/devices/{id}/keys`

Retrieves a list of all registered keys associated with a device registered to a customer through the device binding process.

## Path parameters

- `id` string, required

## Response `200`

OK

- DeviceKeysItem[]
  - `device_id` string — ID of the device.
  - `person_id` string — ID of the person who owns the device.
  - `name` string — The name of the device.
  - `created_at` string — Date and time when the customer registered the device.
  - `deleted_at` string — (For deleted devices only) Date and time when the device was deleted.
  - `keys` object[]
    - `key_id` string — ID of the key.
    - `key_purpose` 'restricted' | 'unrestricted' — The purpose of the key (either `restricted` or `unrestricted`).
    - `used_at` string — Date and time when the key was last used (e.g., for device signing).

## Other responses

- `400` — Validation error
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `500` — Internal server error

---

[API](https://skmtc.net/solarisgroup/apis/device-management.md) · [All operations](https://skmtc.net/solarisgroup/apis/device-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/device-management/revisions/80dd46738839/schema)