---
title: "List a service account's API keys"
method: GET
path: "/orgs/{orgName}/service-accounts/{serviceAccountName}/api-keys"
tags: ["ApiKeys"]
---

# List a service account's API keys

`GET /orgs/{orgName}/service-accounts/{serviceAccountName}/api-keys`

## Request

- Base URL: `https://api.signadot.com/api/v2`
- URL: `https://api.signadot.com/api/v2/orgs/{orgName}/service-accounts/{serviceAccountName}/api-keys`
- Auth: API key in header `signadot-api-key`

List the API keys bound to a service account (admin only).

## Path parameters

- `orgName` string, required
- `serviceAccountName` string, required

## Response `200`

OK

- ListApiKeysResponse
  - `apiKeys` ApiKey[]
    - `createdAt` string
    - `description` string
    - `expiresAt` string: ExpiresAt is the key's expiration time (RFC3339), or nil if it never expires.
    - `id` string
    - `lastUsedAt` string
    - `maskedValue` string
    - `token` string

## Other responses

- `403`: Forbidden
- `404`: Not Found

## Changes

- **2026-06-16** `40d6198d7957`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/signadot/apis/signadot-api/changes/orgs/:orgName/service-accounts/:serviceAccountName/api-keys/get.md)

---

[API](https://skmtc.dev/signadot/apis/signadot-api.md) - [All operations](https://skmtc.dev/signadot/apis/signadot-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signadot/apis/signadot-api/revisions/5e80b0f9c718?raw)