# List Your Approval Keys

The public keys you sign your approvals with, newest first — revoked ones included.

## Overview

- Your own keys only: each approver sees and manages theirs. `status` is `active` or `revoked`; at most two are active at a time.
- `id` is the `kid` your decisions name. `thumbprint` is the key's RFC 7638 SHA-256 thumbprint, base64url. `lastUsedAt`: the last decision it signed.
- For the tenant roles that approve — `approver`, `owner`, `tenantadmin`, `non_signing_admin` ([Approvals](https://docs.aureahub.com/docs/guide-approvals.md)).

## Endpoint

### `GET /v1/approval-keys`

Authentication: bearer token required.

Your approval keys, newest first.

**Responses**

`200` OK

```json
{
  "data": [
    {
      "id": "7b2e4c91-5d3a-4f68-8e0b-1c9a7d3f5e24",
      "name": "Laptop key",
      "status": "active",
      "publicKey": {
        "kty": "EC",
        "crv": "P-256",
        "x": "oxctA6E_hib_b2IU2itzKLJ2wIh5f89eC4F5_-8jreA",
        "y": "HXPIR2nV0i74GXLTQpg6rHEbZ67c_D1xaJUIccZCrjg"
      },
      "thumbprint": "CFGfOpgdwqX6UnGU5dwiwVwsk9edRucCD8GDfAr9xrI",
      "createdAt": "2026-10-06T09:12:40.511Z",
      "lastUsedAt": null,
      "revokedAt": null,
      "revokeReason": null
    }
  ]
}
```

`403` Role

```json
{
  "statusCode": 403,
  "error": "ForbiddenError",
  "message": "Tenant admin access required. Your role does not have permission to perform this action."
}
```

---

Web version: https://docs.aureahub.com/#approval-keys-list