---
title: "List integration keys"
method: GET
path: "/v1/integrations/keys"
tags: ["Integrations key"]
---

# List integration keys

`GET /v1/integrations/keys`

Returns a paginated list of the caller's integration keys (stored third-party
credentials). Keys are scoped to the authenticated user (Cardda staff see all).

The secret fields `password` and `token` are never returned. Each key includes
`company_ids`, the companies managed with it.

Supports `_start`/`_end` pagination, `_field`/`_order` sorting, and per-field filters.

## Query parameters

- `key_service_id` string
- `enabled` boolean

## Parameters

- `#/paths/~1v1~1bills/get/parameters/0` — unresolved $ref
- `#/paths/~1v1~1bills/get/parameters/1` — unresolved $ref
- `#/paths/~1v1~1bills/get/parameters/2` — unresolved $ref
- `#/paths/~1v1~1bills/get/parameters/3` — unresolved $ref
- `#/paths/~1v1~1bills/get/parameters/4` — unresolved $ref

## Response `200`

Paginated list of integration keys.

- IntegrationsKey[]
  - `id` string, uuid, required
  - `status` string, required
  - `enabled` boolean, nullable
  - `auth_method` 'token' | 'password', required — Authentication method, inherited from the key service.
  - `identifier` string, nullable — The account identifier (e.g. RUT/username) for password-based services.
  - `identifier_type` string, nullable
  - `key_service_id` string, required — Id of the integration service this key authenticates against.
  - `user_id` string, required — Owner of the key.
  - `company_ids` string[] — Ids of the companies managed with this key, added via serializer method.
  - `meta` object, nullable
  - `created_at` string, date-time
  - `updated_at` string, date-time

## Other responses

- `401` — Unauthorized - missing or invalid authentication token.

---

[API](https://skmtc.dev/cardda/apis/banking-api.md) · [All operations](https://skmtc.dev/cardda/apis/banking-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cardda/banking-api/revisions/ff1aeb3fda8b/schema)