List signing secrets

GET
/providers/{providerID}/signing-secrets

List your active signing secrets, newest first. Only metadata is returned; the secret value is never included.

A signing secret is the shared 256-bit key that encrypts the ledger request and response JWEs between Moov Money and you. The plaintext value is returned exactly once, in the response from POST /providers/{providerID}/signing-secrets, and is never retrievable again. Multiple secrets can be active at the same time, which is how you rotate: create the new secret, deploy it, then revoke the old one.

Pagination is cursor-based. Omit cursor to fetch the first page; use nextCursor from each response to fetch the next page.

Auth: API key or bearer token. The providerID in the path must be your account.

Request
cURL
curl -X GET https://api.moov.money/providers/{providerID}/signing-secrets
Responses
200 400 401 403
The request completed successfully.
{
  "signingSecrets": [
    {
      "createdOn": "2026-08-31T12:00:00Z",
      "secretID": "sec_01HF5J9ZKQT4RXP8M2VYBN3D"
    }
  ]
}
Malformed request: the body or headers failed validation.
Authentication missing, invalid, or insufficient.
Authentication present but the action is forbidden for this principal/claim.

Headers

X-Moov-Version

string
Set this header to the API version being targeted (e.g. v2026.07.00). When omitted, the server applies its default version.

Path parameters

providerID

string required
Your provider account ID.

Query parameters

cursor

string
Opaque pagination cursor from a previous response’s nextCursor. Omit to fetch the first page.

limit

integer <int32>
Maximum number of secrets to return. Defaults to 25; values outside 1-100 return 400.

Response

Response envelope for list signing secrets.

nextCursor

string
Opaque cursor for the next page; absent on the last page.

hasMore

boolean required
Whether another page of results follows this one.

signingSecrets

array<object> required
The page of active signing secrets, newest first.
Show child attributes

signingSecrets[]

createdOn

string<date-time>
When the secret was created.

revokedOn

string<date-time> | null
When the secret was revoked, or null while active.

secretID

string
Unique identifier for the signing secret.