---
title: "Get KMS provider lifecycle metadata"
method: GET
path: "/{tenantId}/kms/providers/{providerId}/lifecycle"
tags: ["Lifecycle"]
---

# Get KMS provider lifecycle metadata

`GET /{tenantId}/kms/providers/{providerId}/lifecycle`

Returns lifecycle metadata for a KMS provider instance, including ownership scope, lifecycle status, and deletion protection. This endpoint reads KMS instance metadata; platform configuration remains responsible for creating providers and enabling or disabling provider configuration.

## Response `200`

Provider lifecycle metadata.

- KmsProviderLifecycleMetadata — Lifecycle metadata for a KMS provider instance.
  - `tenantId` string, required
  - `providerId` string, required
  - `classification` 'PLATFORM' | 'TENANT' | 'APPLICATION' | 'SERVICE' — Operational ownership scope for tenant-managed infrastructure resources.
  - `status` 'ACTIVE' | 'DEGRADED' | 'MAINTENANCE' | 'MIGRATING' | 'DEPRECATED' | 'RETIRED', required — Lifecycle status for a KMS provider.
  - `protectedSystemProvider` boolean, required — Whether deletion is protected by system-provider policy.
  - `updatedAt` string, date-time, nullable

## Other responses

- `404` — The requested resource was not found.
- `500` — An unexpected error occurred on the server.

## Changes

- **2026-06-26** `f4b160fd91dc` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api/changes/:tenantId/kms/providers/:providerId/lifecycle/get.md)

---

[API](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/kms-rest-server-api/revisions/e9136cbde1c1/schema)