---
title: "List enrolled agent keys"
method: GET
path: "/v1/inboxes/{inbox_id}/identity/keys"
tags: ["Identity"]
---

# List enrolled agent keys

`GET /v1/inboxes/{inbox_id}/identity/keys`

## Request

- Base URL: `https://api.deadsimple.email`
- URL: `https://api.deadsimple.email/v1/inboxes/{inbox_id}/identity/keys`
- Auth: HTTP bearer

Public keys that may sign assertions for this inbox, with last_used_at per key.

## Path parameters

- `inbox_id` string, required

## Response `200`

Keys.

- object
  - `keys` IdentityKey[]
    - `kid` string: RFC 7638 thumbprint prefix. Put it in the assertion's JWS header.
    - `inbox_id` string
    - `email` string
    - `name` string
    - `jwk` object: The enrolled P-256 public key (kty EC, crv P-256, x, y, kid).
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable
  - `total` integer

---

[API](https://skmtc.dev/deadsimple/apis/dead-simple-email-api.md) · [All operations](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/revisions/c697881be131?raw)