---
title: "List active and revoked provider keys, with their purpose"
method: GET
path: "/v1/execution/provider-keys"
---

# List active and revoked provider keys, with their purpose

`GET /v1/execution/provider-keys`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/execution/provider-keys`
- Auth: HTTP bearer

## Query parameters

- `org_id` string, uuid

## Response `200`

Provider-key inventory, public metadata only

- ExecutionProviderKeyListResponse
  - `service` 'decionis', required
  - `keys` ExecutionProviderKey[], required
    - `service` 'decionis', required
    - `kid` string, required
    - `issuer` string, required
    - `algorithm` 'EdDSA', required
    - `purpose` 'effect_receipt' | 'presence_attestation' | 'usage_report' | 'signed_signal', required: What the key verifies. A key is only ever used for its own purpose. `usage_report`: an edge installation's monthly usage reports (`POST /v1/edge/usage-reports`); register it with the installation id as `issuer`, which the reports name as `iss`. `signed_signal`: a producer's signed standing signals (`evidence.signals` on enforce-and-bind); register it with the producer id as `issuer`, which the signals name as `iss`.
    - `label` string, nullable, required
    - `created_at` string, date-time, required
    - `revoked_at` string, date-time, nullable, required

## Other responses

- `400`: Structured API error
- `401`: Structured API error
- `403`: Structured API error

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)