# List sub-accounts

> List sub-accounts for this team. Requires a parent project API key; sub-account API keys receive HTTP 403.

`GET https://api.zavu.dev/v1/sub-accounts`

List sub-accounts for this team. Requires a parent project API key; sub-account API keys receive HTTP 403.

## Parameters

- `limit` (query, integer)
- `cursor` (query, string)

## Responses

### 200

List of sub-accounts.

- `items` (object[], required)
  - `id` (string, required)
  - `name` (string, required)
  - `externalId` (string, nullable): External reference ID set by the parent account.
  - `status` (string, required): `active` and `inactive` are set with PATCH. `pending_deletion` is read-only: the sub-account was deactivated with DELETE, its API keys are revoked, and it is removed after 14 days. One of: `active`, `inactive`, `pending_deletion`.
  - `totalSpent` (integer, required): Total amount spent by this sub-account in cents.
  - `creditLimit` (integer, nullable): Spending cap in cents. When reached, messages from this sub-account will be blocked.
  - `metadata` (object, nullable)
  - `apiKey` (string): API key for the sub-account. Only returned on creation.
  - `createdAt` (string<date-time>, required)
- `nextCursor` (string, nullable)

### 401

Unauthorized.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 403

Forbidden. Sub-account API keys cannot manage sub-accounts.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

## Example

```bash
curl -X GET "https://api.zavu.dev/v1/sub-accounts" \
  -H "Authorization: Bearer $ZAVUDEV_API_KEY"
```

```typescript
import Zavudev from "@zavudev/sdk";

const zavu = new Zavudev({ apiKey: process.env.ZAVUDEV_API_KEY });

const result = await zavu.subAccounts.list();

console.log(result);
```