Get access key details

Reviewed on October 8, 2026

Returns the details of an AK/SK credential attached to a service account. The secret key is never returned: it is only available in the creation response.

Permissions

info

This action requires the following IAM (Identity and Access Management) permission:

• iam.accessKey.get

API

API

Retrieve the details of a single credential: access key, status and lifetime.

info

Prerequisites: the credential must exist — its identifier is available in the list of access keys.

This operation requires an access token and the permissions listed at the top of the page.

GET https://api.eu-west-2.numspot.com/iam/organisations/{organisationId}/serviceAccounts/{serviceAccountId}/aksk/{akskId}

Full documentation for this endpoint ↗

Parameters

Parameter	Location	Required	Type	Example	Description
organisationId	path	yes	UUID	123e4567-e89b-12d3-a456-426614174000	Organisation owning the service account
serviceAccountId	path	yes	UUID	123e4567-e89b-12d3-a456-426614174000	Service account the credential is attached to
akskId	path	yes	UUID	123e4567-e89b-12d3-a456-426614174000	Credential identifier, from the list of access keys

Example

export TOKEN="{TOKEN}"

curl 'https://api.eu-west-2.numspot.com/iam/organisations/{ORGANISATION-ID}/serviceAccounts/{SERVICE-ACCOUNT-ID}/aksk/{AKSK-ID}' \
  --header "Authorization: Bearer $TOKEN"

Variable	Represents	Where to find its value
{TOKEN}	OAuth 2.0 access token of the request	Generated by the API authentication flow (see Access token)
{ORGANISATION-ID}	Organisation owning the service account	Numspot console (active organisation)
{SERVICE-ACCOUNT-ID}	Service account the credential is attached to	Response of the List service accounts ↗ API
{AKSK-ID}	Credential to read	id field of the list of access keys

Response

200 OK — the credential metadata:

Field	Type	Description
id	string	Credential identifier
accessKey	string	Access key of the credential
status	string	ACTIVE, INACTIVE or EXPIRED
createdAt	string	Creation date
expiresAt	string	Expiration date
lastUsedAt	string	Date of the last use, if the credential has already authenticated a session

{
  "id": "019db8c2-1a7b-7de1-8a42-797176d8bbf0",
  "accessKey": "AKIAIOSF",
  "status": "ACTIVE",
  "createdAt": "2026-10-07T10:15:30.485Z",
  "expiresAt": "2027-10-07T10:15:30.485Z",
  "lastUsedAt": "2026-10-07T14:02:11.220Z"
}