Method: projects.locations.instances.keyRings.keys.transactions.list

Lists Transactions for a Key, or across Keys.

To list across Keys or KeyRings, use - as a wildcard in parent (AIP-159), for example projects/p/locations/l/instances/i/keyRings/-/keys/-. This powers the Signer Console's pending queue, for example with filter = "state = PENDING_AUTHORIZATION".

Results are always scoped to the caller. If the caller's User (the User whose principal matches the caller's authenticated identity) has only the SIGNER role, only Transactions on Keys where that User holds a key share are returned. Transactions the caller cannot see are omitted rather than failing the request.

HTTP request

GET https://mpc.googleapis.com/v1beta/{parent=projects/*/locations/*/instances/*/keyRings/*/keys/*}/transactions

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
parent

string

Required. The parent Key. Use - for {keyRing} and {key} to list across all Keys in the instance (AIP-159). Format: projects/{project}/locations/{location}/instances/{instance}/keyRings/{keyRing}/keys/{key} It takes the form projects/{project}/locations/{location}/instances/{instance}/keyRings/{keyring}/keys/{key}.

Query parameters

Parameters
pageSize

integer

Optional. The maximum number of Transactions to return. The service may return fewer. If unspecified, at most 50 are returned. Values above 1000 are coerced to 1000.
pageToken

string

Optional. A page token from a previous transactions.list call. When paginating, all other parameters must match the call that returned the token.
filter

string

Optional. A filter expression (AIP-160). Supported fields:

  • state: equality, e.g. state = PENDING_AUTHORIZATION.
  • createTime: comparison against an RFC 3339 timestamp, e.g. createTime > "2026-10-01T00:00:00Z".
  • expireTime: comparison against an RFC 3339 timestamp.

Expressions can be combined with AND. Unsupported fields or operators fail with INVALID_ARGUMENT.
orderBy

string

Optional. The order of results (AIP-132). Supported fields: createTime and expireTime, each optionally followed by desc. Defaults to createTime desc.

Request body

The request body must be empty.

Response body

Response message for TransactionService.ListTransactions.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "transactions": [
    {
      object (Transaction)
    }
  ],
  "nextPageToken": string
}
Fields
transactions[]

object (Transaction)

The Transactions visible to the caller.
nextPageToken

string

A token to retrieve the next page. Empty if there are no more pages.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.