# List sub-account API keys

> List sub-account API keys. Requires a parent project API key; sub-account API keys receive HTTP 403.

`GET https://api.zavu.dev/v1/sub-accounts/{id}/api-keys`

List sub-account API keys. Requires a parent project API key; sub-account API keys receive HTTP 403.

## Parameters

- `id` (path, string, required): Sub-account ID.

## Responses

### 200

List of API keys.

- `items` (object[], required)
  - `id` (string, required)
  - `name` (string, required)
  - `key` (string): Full API key. Only returned on creation.
  - `keyPrefix` (string, required): First characters of the key for identification.
  - `environment` (string, required) One of: `live`, `test`.
  - `permissions` (string[])
  - `lastUsedAt` (number, nullable)
  - `revokedAt` (number, nullable)
  - `createdAt` (number, required)

### 401

Unauthorized.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 403

Forbidden. Sub-account API keys cannot manage sub-accounts.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 404

Not a sub-account of this team. The parent project's own id is not a sub-account and answers 404.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

## Example

```bash
curl -X GET "https://api.zavu.dev/v1/sub-accounts/id_abc123/api-keys" \
  -H "Authorization: Bearer $ZAVUDEV_API_KEY"
```

```typescript
import Zavudev from "@zavudev/sdk";

const zavu = new Zavudev({ apiKey: process.env.ZAVUDEV_API_KEY });

const result = await zavu.subAccounts.apiKeys.list("id_abc123");

console.log(result);
```