---
title: "List credentials you issued to a customer"
method: GET
path: "/api/v1/businesses/{id}/keys"
tags: ["businesses"]
---

# List credentials you issued to a customer

`GET /api/v1/businesses/{id}/keys`

## Request

- Base URL: `https://app.blueticked.com`
- URL: `https://app.blueticked.com/api/v1/businesses/{id}/keys`
- Auth: HTTP bearer

List only keys minted by the calling API key for this business. Secrets and hashes are never returned.

Requires businesses:write on an organization-wide API key. Another key in the same workspace cannot list keys you minted. Session-created and older keys with no minter attribution remain managed through the dashboard.

Includes active, expired and revoked keys. expires_at and revoked_at can be null. limit defaults to 50, maximum 100; pass next_cursor as cursor for the next page. next_cursor is null when has_more is false.

SDK listKeys support follows in the next SDK release; call this REST endpoint until then. To replace a credential, mint a new one, deploy it, then revoke the old one. There is no in-place API rotation endpoint.

## Path parameters

- `id` string, required

## Query parameters

- `limit` integer
- `cursor` string, uuid

## Response `200`

Success

- object
  - `data` object[], required
    - `id` string, uuid, required
    - `name` string, required
    - `prefix` string, required
    - `scopes` string[], required
    - `created_at` string, date-time, required
    - `expires_at` string, date-time, nullable, required
    - `revoked_at` string, date-time, nullable, required
  - `has_more` boolean, required
  - `next_cursor` string, uuid, nullable, required
  - `request_id` string, required

## Other responses

- `400`: Validation failed
- `401`: Unauthorized: missing or invalid API key
- `402`: Insufficient wallet balance
- `403`: Forbidden: scope, plan limit, or suspension
- `404`: Not found
- `409`: Conflict (idempotency-key reuse or resource in use)
- `422`: Understood but refused: the request is well-formed, the action is not permitted for this resource
- `429`: Rate limited
- `500`: Internal error
- `502`: An upstream provider refused or failed the request
- `503`: Channel or send queue unavailable

---

[API](https://skmtc.dev/blueticked/apis/blueticked-api.md) · [All operations](https://skmtc.dev/blueticked/apis/blueticked-api/llms.txt) · [OpenAPI document](https://skmtc.dev/blueticked/apis/blueticked-api/revisions/07132284f4ff?raw)