---
title: "List delegated signing keys"
method: GET
path: "/auth/delegated-keys"
tags: ["Embedded Wallet Auth"]
---

# List delegated signing keys

`GET /auth/delegated-keys`

List delegated signing keys for an Embedded Wallet internal account, a card funding source, or both, including `PENDING` keys (user created but policy leg never completed) and `REVOKED` keys. At least one of `accountId` or `fundingSourceId` must be supplied.

## Query parameters

- `accountId` string
- `fundingSourceId` string

## Response `200`

Delegated keys matching the supplied filters. Returns an empty `data` array when no matching delegated keys are visible to the caller.

- DelegatedKeyListResponse
  - `data` DelegatedKey[], required — Delegated signing keys matching the list filters.
    - `id` string, required — Grid-issued `DelegatedKey:<uuid>` identifier.
    - `cardId` string, required — The card this key is delegated for.
    - `fundingSourceId` string, required — The card funding source this key is delegated for.
    - `accountId` string, required — The Embedded Wallet internal account this key is delegated for, derived from the card funding source.
    - `publicKey` string, required — Compressed P-256 public key (hex) of the delegated API keypair.
    - `nickname` string, required — Human-readable label for the delegated key.
    - `status` 'PENDING' | 'ACTIVE' | 'REVOKED', required — Status of a delegated signing key. - `PENDING`: The delegated user exists but the policy-creation leg never completed. The key cannot sign. - `ACTIVE`: The policy is granted and the key may stamp quote executions. - `REVOKED`: The delegated user has been deleted and the key can no longer sign.
    - `createdAt` string, date-time, required — When the delegated key was created.
    - `updatedAt` string, date-time, required — When the delegated key was last updated.

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `500` — Internal service error

## Changes

- **2026-08-22** `c3db0ca19655` — 1 warning
  - removed the optional property `data/items/spendingLimits` from the response with the `200` status
- **2026-08-14** `aaa1fb8782c8` — 1 warning
  - added the new `EXTERNAL_ACCOUNT_VERIFICATION_REQUIRED` enum value to the `code` response property for the response status `400`
- **2026-08-13** `df12ec487f0e` — 1 warning
  - added the new `TRANSACTION_SIZE_LIMIT_EXCEEDED` enum value to the `code` response property for the response status `400`
- **2026-08-11** `b06902b6595a` — 1 warning
  - added the new `CARDHOLDER_KYC_NOT_APPROVED` enum value to the `code` response property for the response status `400`
- **2026-08-06** `526036c12609` — 1 warning
  - added the new `END_USER_TERMS_VERSION_NOT_FOUND` enum value to the `code` response property for the response status `400`

[Full history](https://skmtc.dev/stainless-api/apis/grid-api/changes/auth/delegated-keys/get.md)

---

[API](https://skmtc.dev/stainless-api/apis/grid-api.md) · [All operations](https://skmtc.dev/stainless-api/apis/grid-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/stainless-api/grid-api/revisions/2ec84c06fbec/schema)