---
title: "List Jump Server Backup Key State"
method: GET
path: "/api/v2/privileged-access/backup-key"
tags: ["Privileged Access"]
---

# List Jump Server Backup Key State

`GET /api/v2/privileged-access/backup-key`

## Request

- Base URL: `https://console.jumpcloud.com`
- URL: `https://console.jumpcloud.com/api/v2/privileged-access/backup-key`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/docs/api/v2/privileged-access/backup-key/get.ts> (a function with typed inputs; its response is checked against the schema)

Get the Jump Server backup key state for the tenant. Returns `keyId` only: an empty `keyId` means no key has been generated yet and encrypted Jump Server backups are not being produced. The key itself and its version are returned exactly once, by GeneratePrivilegedAccessBackupKey, and are never readable afterwards. Requires the PAM Backup permission.

## Response `200`

A successful response.

- JumpcloudPrivilegedAccessGetPrivilegedAccessBackupKeyReply
  - `keyId` string

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/revisions/f396d9271b46?raw)