# List email sender domains

`GET /v1/email-sender-domains` · permission `email-sender-domains:read` · all plans

Lists the environment's email sender domains, oldest first. An environment has at most 10 sender domains, so the list is not paginated: `list_metadata.before` and `list_metadata.after` are always null. Sender domains exist only in `production` environments; in other environments the list is empty.

No request parameters or body.

## Response

`200 OK` with every sender domain of the environment. Each item has the fields described in [Get an email sender domain](get.md).

```json
{
  "data": [
    {
      "id": "sdom_01k7r9m3q5t8v2w4x6y8z0a2b4",
      "domain": "mail.example.com",
      "status": "pending_dns",
      "active_selector": "akp1",
      "dkim_status": null,
      "return_path_status": null,
      "dmarc_alignment": null,
      "last_checked_at": null,
      "failing_since": null,
      "degraded_since": null,
      "records": [
        {
          "type": "CNAME",
          "name": "akp1._domainkey.mail.example.com",
          "value": "akp1.sdom_01k7r9m3q5t8v2w4x6y8z0a2b4.dkim.eu.keenauth.app",
          "required": true
        },
        {
          "type": "CNAME",
          "name": "akp2._domainkey.mail.example.com",
          "value": "akp2.sdom_01k7r9m3q5t8v2w4x6y8z0a2b4.dkim.eu.keenauth.app",
          "required": true
        },
        {
          "type": "CNAME",
          "name": "rp.mail.example.com",
          "value": "rp.eu.mail.keenauth.app",
          "required": true
        }
      ],
      "version": 1,
      "created_at": "2026-10-19T09:00:00Z",
      "updated_at": "2026-10-19T09:00:00Z"
    }
  ],
  "list_metadata": {
    "before": null,
    "after": null
  }
}
```

## Errors

| HTTP | code | When |
|---|---|---|
| 401 | `unauthenticated` | The credential is missing, invalid or revoked. |
| 403 | `insufficient_permissions` | The credential lacks the required permission. |
| 429 | `rate_limited` | The rate limit was exceeded; retry after the `Retry-After` period. |
| 503 | `service_unavailable` | A dependency is temporarily unavailable; retry after the `Retry-After` period. |

## Example

```bash
curl https://api.eu.keenauth.com/v1/email-sender-domains \
  -H "Authorization: Bearer $KEENAUTH_SECRET_KEY"
```

CLI: `keenauth email-sender-domains list`