---
title: "List service accounts"
canonical: "https://admiral.io/docs/api/service-accounts/ServiceAccountAPI_ListServiceAccounts"
---

# List service accounts

`GET https://api.admiral.io/v1/service-accounts`

Scope: `serviceaccount:read`

### Query parameters

- `filter` (string): Filter expression to narrow results. Uses the Admiral filter DSL. Filterable fields: - `issuer_id`: service accounts that trust this issuer. - `agent_id`: the service account this agent runs as. Example: `field['issuer_id'] = 'iss-4m8q2x7k1p9c'` Length at most 1024.
- `page_size` (integer (int32)): The page_size query parameter. Value 0 to 100.
- `page_token` (string): The page_token query parameter.

### Response 200

Success

- `service_accounts` (array of ServiceAccount)
  - `id` (string): Pattern `^sa-[0-9a-z]+$`. Read-only.
  - `agent_id` (string): `agt-`: the agent that runs as this service account. Empty for one that runs no agent. Read-only.
  - `issuer_id` (string): `iss-`: the issuer whose tokens it accepts. For an agent's, set when the agent enrolls; empty before. Read-only.
  - `subject` (string): The `sub` a token must carry. For a Kubernetes service account, `system:serviceaccount:<namespace>:<name>`. For an agent's, recorded from its verified token when it enrolls and fixed from then on; empty before. Read-only.
  - `enrolled_at` (Timestamp): A point in time in RFC 3339 format, with up to nanosecond precision. Output uses UTC (`Z`); input may use an offset from UTC. Read-only.
  - `created_by` (ActorRef): ActorRef is a lightweight reference to the user or agent that performed an action. Server-populated on all resource responses. Clients should never send this. Read-only.
    - `id` (string): The actor's typed id: a `usr-` user id or an `sa-` service account id.
    - `display_name` (string): Human-readable name (e.g., "John Smith", "deploy-bot").
    - `email` (string): Email address (empty for non-human actors).
  - `created_at` (Timestamp): A point in time in RFC 3339 format, with up to nanosecond precision. Output uses UTC (`Z`); input may use an offset from UTC. Read-only.
- `next_page_token` (string)