---
title: "List encryption keys"
method: GET
path: "/encryption-keys"
tags: ["encryption-keys"]
---

# List encryption keys

`GET /encryption-keys`

Lists all encryption keys for the workspace associated with the Management API key.

## Query parameters

- `status` 'enabled' | 'disabled'
- `environment` string
- `cursor` string
- `limit` number

## Headers

- `X-API-Version` string, required

## Response `200`

List of encryption keys matching the given query.

- EncryptionKeysPaginatedResponseDtoV1
  - `data` EncryptionKeyResponseDtoV1[], required
    - `id` string, required — Auto-generated ID for an encryption key
    - `name` string, required — Encryption key name
    - `description` string — Encryption key description
    - `status` 'enabled' | 'disabled', required — API key status, indicates if an API keys is enabled or disabled.
    - `environment` string, nullable, required — ID of an environment the encryption key belongs to.
    - `previous_token` string — Previous value of an encryption key. When a key is rotated, the previous value is stored so the rotation can be reverted. This field is immutable, and only visible upon creation.
    - `token` string — Value of an encryption key. This field is immutable, and only visible upon creation.
    - `next_token` string — Next value of an encryption key. Becomes the current value when a key is rotated.
    - `created_at` string, date-time, required — Date when encryption key was created.
    - `last_activated_at` string, date-time, nullable, required — Date when encryption key status was last changed to active.
    - `last_rotated_at` string, date-time, nullable, required — Date when encryption key status was last rotated.
    - `last_deactivated_at` string, date-time — Date when encryption key was disabled.
  - `metadata` PaginationMetadataV2, required
    - `pagination` PaginationDataV2, required
      - `next_cursor` string, nullable, required — Cursor token to be used to get the next page of results.
      - `prev_cursor` string, nullable, required — Cursor token used to get the previous page of results.

## Other responses

- `400` — Error: Bad request.
- `401` — Error: Invalid API key.
- `403` — Forbidden. Insufficient permissions.
- `422` — Error: Payload parameters are invalid.
- `429` — Error: API key has exceeded its rate limit.

---

[API](https://skmtc.dev/fingerprint/apis/management-api.md) · [All operations](https://skmtc.dev/fingerprint/apis/management-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fingerprint/management-api/revisions/b17eccec9d47/schema)