List delegated signing keys

List delegated signing keys for an Embedded Wallet internal account, a card funding source, or both, including PENDING keys (user created but policy leg never completed) and REVOKED keys. At least one of accountId or fundingSourceId must be supplied.

GET /auth/delegated-keys

List delegated signing keys

cURL

curl --request GET \
  --url https://api.lightspark.com/grid/2025-10-13/auth/delegated-keys \
  --header 'Authorization: Basic <encoded-value>'

200

{
  "data": [
    {
      "id": "DelegatedKey:019542f5-b3e7-1d02-0000-000000000021",
      "accountId": "InternalAccount:019542f5-b3e7-1d02-0000-000000000002",
      "publicKey": "02a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90",
      "nickname": "Settlement service key",
      "status": "ACTIVE",
      "createdAt": "2026-04-08T15:30:01Z",
      "updatedAt": "2026-04-08T15:30:42Z",
      "cardId": "Card:019542f5-b3e7-1d02-0000-000000000010",
      "fundingSourceId": "CardFundingSource:019542f5-b3e7-1d02-0000-000000000011",
      "agentId": "Agent:019542f5-b3e7-1d02-0000-000000000042"
    }
  ]
}

Authorizations

Authorization · string · header · required

API token authentication using format <api token id>:<api client secret>

Query Parameters

accountId · string

The id of the internal account whose delegated keys to list.

fundingSourceId · string

The id of the card funding source whose delegated keys to list.

Response

200

application/json

Delegated keys matching the supplied filters. Returns an empty data array when no matching delegated keys are visible to the caller.

data · Delegated Key · object[] · required

Delegated signing keys matching the list filters.

Show child attributes