---
title: "Get a delegated signing key"
method: GET
path: "/auth/delegated-keys/{id}"
tags: ["Embedded Wallet Auth"]
---

# Get a delegated signing key

`GET /auth/delegated-keys/{id}`

Retrieve a delegated signing key by its system-generated id.

## Path parameters

- `id` string, required

## Response `200`

Successful operation

- DelegatedKey — A delegated signing key for a card funding source backed by an Embedded Wallet internal account. Returned from `POST /auth/delegated-keys` (on activation), `GET /auth/delegated-keys` (list), and `GET /auth/delegated-keys/{id}`. The keypair is generated and custodied by Grid; the private key is never returned. While `ACTIVE`, Grid may use the key to authorize Spark token-transaction signing for the card funding source's Embedded Wallet funding account in place of a session keypair. `publicKey` is informational metadata identifying the credential.
  - `id` string, required — Grid-issued `DelegatedKey:<uuid>` identifier.
  - `cardId` string, required — The card this key is delegated for.
  - `fundingSourceId` string, required — The card funding source this key is delegated for.
  - `accountId` string, required — The Embedded Wallet internal account this key is delegated for, derived from the card funding source.
  - `publicKey` string, required — Compressed P-256 public key (hex) of the delegated API keypair.
  - `nickname` string, required — Human-readable label for the delegated key.
  - `status` 'PENDING' | 'ACTIVE' | 'REVOKED', required — Status of a delegated signing key. - `PENDING`: The delegated user exists but the policy-creation leg never completed. The key cannot sign. - `ACTIVE`: The policy is granted and the key may stamp quote executions. - `REVOKED`: The delegated user has been deleted and the key can no longer sign.
  - `spendingLimits` DelegatedKeySpendingLimit[] — Per-transaction spending limits the key was created with, at most one entry per currency. Absent when the key has no limits.
    - `currencyCode` string, required — Uppercase alphanumeric currency code the limit applies to — ISO 4217 for fiat (e.g. USD), or a Grid token code for stablecoins (e.g. USDB). Must match the card's currency; requests with any other currency are rejected.
    - `maxPerTransaction` integer, required — Largest amount a single card transaction may authorize, in the smallest unit of the currency (e.g., cents for USD).
  - `createdAt` string, date-time, required — When the delegated key was created.
  - `updatedAt` string, date-time, required — When the delegated key was last updated.

## Other responses

- `401` — Unauthorized
- `404` — Delegated key not found
- `500` — Internal service error

---

[API](https://skmtc.net/stainless-api/apis/grid-api.md) · [All operations](https://skmtc.net/stainless-api/apis/grid-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stainless-api/grid-api/revisions/526036c12609/schema)