> ## Documentation Index
> Fetch the complete documentation index at: https://docs.whitebit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Sub-Account API Keys

> List all API keys associated with a specific sub-account via the WhiteBIT V4 API.

<Note>
  For security reasons, the `apiSecret` field returns an empty string in the response. The API secret is only displayed once during the initial API key creation.
</Note>


## OpenAPI

````yaml /openapi/private/main_api_v4.yaml POST /api/v4/sub-account/api-key/list
openapi: 3.0.3
info:
  title: WhiteBIT Private HTTP API V4
  description: |
    WhiteBIT Private HTTP API V4 for Main balance changes.

    Base URL: https://whitebit.com

    All endpoints return time in Unix-time format.
    All endpoints return either a JSON object or array.
    For receiving responses from API calls please use http method POST.
  version: 4.0.0
  contact:
    name: WhiteBIT Support
    email: support@whitebit.com
    url: https://whitebit.com
servers:
  - url: https://whitebit.com
    description: WhiteBIT Global Server
  - url: https://whitebit.eu
    description: WhiteBIT EU Server
security:
  - ApiKeyAuth: []
    PayloadAuth: []
    SignatureAuth: []
tags:
  - name: Main Account
    description: Main account balance and operations
  - name: Deposit
    description: Cryptocurrency and fiat deposit operations
  - name: Withdraw
    description: Cryptocurrency and fiat withdrawal operations
  - name: Transfer
    description: Balance transfer operations
  - name: Codes
    description: WhiteBIT codes operations
  - name: Crypto Lending - Fixed
    description: Fixed crypto lending plans
  - name: Crypto Lending - Flex
    description: Flexible crypto lending plans
  - name: Fees
    description: Fee information
  - name: Sub-Account
    description: Sub-account management
  - name: Sub-Account API Keys
    description: Sub-account API key management
  - name: Mining Pool
    description: Mining pool operations
  - name: Credit Line
    description: Credit line information
  - name: JWT
    description: JWT token management
paths:
  /api/v4/sub-account/api-key/list:
    post:
      tags:
        - Sub-Account API Keys
      summary: List Sub-Account API Keys
      description: >
        The endpoint retrieves a list of API keys for a
        [sub-account](/glossary#sub-account).

        Note: For security reasons, the apiSecret field returns an empty string.


        <Warning>

        Rate limit: 1000 requests/10 sec.

        </Warning>


        <Note>

        The API does not cache the response.

        </Note>


        <Note>

        Results are sorted by api-key id descending (newest key first). The
        response is a plain array with no `total`, `has_more`, or cursor — a
        returned count below `limit` marks the last page (an empty array means
        no further records).

        </Note>
      operationId: listSubAccountApiKeys
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                subAccountId:
                  type: string
                  description: ID of the sub-account to list API keys for
                  example: 8e667b4a-0b71-4988-8af5-9474dbfaeb51
                limit:
                  type: integer
                  minimum: 1
                  maximum: 100
                  default: 100
                  example: 100
                offset:
                  type: integer
                  minimum: 0
                  maximum: 10000
                  default: 0
                  example: 0
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  limit:
                    type: integer
                  offset:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/SubAccountApiKeyList'
        '400':
          description: Request validation failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    SubAccountApiKeyList:
      type: object
      properties:
        subAccountId:
          type: string
          example: 8e667b4a-0b71-4988-8af5-9474dbfaeb51
        id:
          type: string
          example: a1b2c3d4-e5f6-7890-abcd-ef1234567890
        title:
          type: string
          example: Trading Bot Key
        isEnabled:
          type: boolean
          example: true
        apiKey:
          type: string
          example: pub-key-abc123
        apiSecret:
          type: string
          description: Empty for security (only shown during creation)
          example: ''
        type:
          type: string
          example: '1'
        lastActivity:
          type: integer
          example: 1641081600
        restrictAccess:
          type: boolean
          example: false
        accessEndpoints:
          type: array
          items:
            type: object
            properties:
              name:
                type: string
                example: /api/v4/main-account/balance
              title:
                type: string
                example: Get Balance
    Error:
      type: object
      properties:
        code:
          type: integer
        message:
          type: string
        errors:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-TXC-APIKEY
      description: The public WhiteBIT API key.
    PayloadAuth:
      type: apiKey
      in: header
      name: X-TXC-PAYLOAD
      description: Base64-encoded JSON request body.
    SignatureAuth:
      type: apiKey
      in: header
      name: X-TXC-SIGNATURE
      description: >-
        HMAC-SHA512 signature of the payload, hex-encoded. Computed as
        hex(HMAC-SHA512(payload, api_secret)).

````