# List my exports

`GET /fapi/v1/me/exports` · called from the environment's sign-in host

Returns the signed-in user's own data exports of the last 30 days, newest first, at most 10. Only exports the user requested appear; exports an administrator started through the management API or the dashboard are not listed. Requires the authenticated user's `__Host-idp_session` cookie. A first-party app on another origin can instead send its front API access token (`Authorization: DPoP <token>` with a DPoP proof; see [Front API access token](/docs/api/fapi/front-api-token)). Reading does not need a recent sign-in.

Each export has a `status`: `queued` and `running` while it is being prepared, `completed` when the file can be downloaded, `failed` with a `failure_reason` (`too_large`, `user_deleted`, `source_unavailable`, `attempts_exhausted`), and `expired` once the file was deleted (7 days after completion). `file` carries the package's size and SHA-256 when completed or expired.

## Request

Headers:

| Header | Required | Description |
| --- | --- | --- |
| `Idp-Client` | yes | SDK identifier. |

## Response

`200 OK`:

```json
{"data": [{"id": "job_01jbx4k6v8m2c9w5s7r3t1q0zy", "status": "completed",
  "file": {"size": 48213, "sha256": "9f2c5e0d4b1a7c3e8f6d2b0a9c4e1f7d3b5a8c2e6f0d4b9a1c7e3f5d2b8a0c6e"},
  "failure_reason": null, "created_at": "2026-11-03T09:30:00Z", "started_at": "2026-11-03T09:30:02Z",
  "completed_at": "2026-11-03T09:30:09Z", "expires_at": "2026-11-10T09:30:09Z"}]}
```

## Errors

| Status | Code | When |
| --- | --- | --- |
| 401 | `unauthenticated` | No valid session cookie. |
| 503 | `service_unavailable` | The user directory is temporarily unavailable; retry after `Retry-After`. |

## Example

```bash
curl https://example.keenauth.app/fapi/v1/me/exports \
  -H "Idp-Client: my-app/1.0.0 (node/22.0.0)" \
  -b cookies.txt
```

## Personal data

This endpoint carries personal data: privacy requests (the user's own export records). [Personal data in the KeenAuth APIs](/docs/policies/personal-data) describes what is stored, how long it is kept and how it is deleted. Do not send special categories of personal data (health, biometric data, religion, political opinions, sexual orientation) in any field.