# List my linked identities

`GET /fapi/v1/me/identities` · called from the environment's sign-in host

Lists the identities linked to the authenticated user's account (password, social, SAML, OIDC, legacy), oldest first. The external subject (OIDC `sub`, SAML NameID), the identity provider's email address and credential references are never returned. Passkeys and one-time code methods are authenticators and are listed under `GET /fapi/v1/me/authenticators`. Reading does not require a recently verified session. Requires the authenticated user's `__Host-idp_session` cookie; if the cookie is missing, expired, or revoked, returns `401 unauthenticated`. A first-party app on another origin can instead send its front API access token (`Authorization: DPoP <token>` with a DPoP proof; see [Front API access token](/docs/api/fapi/front-api-token)).

## Request

Headers:

| Header | Required | Description |
| --- | --- | --- |
| `Idp-Client` | yes | SDK identifier. |

No body.

## Response

`200 OK` with `{"data": [...]}`.

Each item: `id` (`idn_…`), `type` (`password`, `social`, `saml`, `oidc`, `legacy`), `connection_id` (`conn_…`; `null` for `password`), `provider` (social provider code such as `google`; `null` for other types), `linked_via` (how the identity was linked: `primary`, `auto_verified_email`, `user_confirmed`, `admin_api`, `import`, `jit`, `auto_domain`, `invite_proof`, `manual_link`, `scim_match`), `created_at`.

Use the `id` with `DELETE /fapi/v1/me/identities/{identity_id}` to unlink an identity.

## Errors

| Status | Code | When |
| --- | --- | --- |
| 401 | `unauthenticated` | No valid session cookie. |

## Example

```bash
curl https://example.keenauth.app/fapi/v1/me/identities \
  -H "Idp-Client: my-app/1.0.0 (node/22.0.0)" \
  -b cookies.txt
```

```json
{
  "data": [
    {
      "id": "idn_01j9zzzzzzzzzzzzzzzzzzzzzz",
      "type": "social",
      "connection_id": "conn_01j9yyyyyyyyyyyyyyyyyyyyyy",
      "provider": "google",
      "linked_via": "manual_link",
      "created_at": "2026-10-01T09:00:00Z"
    }
  ]
}
```

## Personal data

This endpoint carries personal data: linked identities. [Personal data in the KeenAuth APIs](/docs/policies/personal-data) describes what is stored, how long it is kept and how it is deleted. Do not send special categories of personal data (health, biometric data, religion, political opinions, sexual orientation) in any field.