---
title: "List Sub-Account API Keys"
method: POST
path: "/api/v4/sub-account/api-key/list"
tags: ["Sub-Account API Keys"]
---

# List Sub-Account API Keys

`POST /api/v4/sub-account/api-key/list`

The endpoint retrieves a list of API keys for a [sub-account](/glossary#sub-account).
Note: For security reasons, the apiSecret field returns an empty string.

<Warning>
Rate limit: 1000 requests/10 sec.
</Warning>

<Note>
The API does not cache the response.
</Note>

<Note>
Results are sorted by api-key id descending (newest key first). The response is a plain array with no `total`, `has_more`, or cursor — a returned count below `limit` marks the last page (an empty array means no further records).
</Note>

## Request body

- object
  - `subAccountId` string — ID of the sub-account to list API keys for
  - `limit` integer
  - `offset` integer

## Response `200`

Successful response

- object
  - `limit` integer
  - `offset` integer
  - `data` SubAccountApiKeyList[]
    - `subAccountId` string
    - `id` string
    - `title` string
    - `isEnabled` boolean
    - `apiKey` string
    - `apiSecret` string — Empty for security (only shown during creation)
    - `type` string
    - `lastActivity` integer
    - `restrictAccess` boolean
    - `accessEndpoints` object[]
      - `name` string
      - `title` string

## Other responses

- `400` — Request validation failed

---

[API](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4.md) · [All operations](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/whitebit/whitebit-private-http-api-v4/revisions/76c9def9942f/schema)