List the API keys of the Organization
GET /v1/api-keys
| Property | Value |
|---|---|
| Operation | list_api_keys |
| Group | API keys |
| Scope | api_keys:read |
| Route class | read |
| Idempotency | No Idempotency-Key |
| Audit | Not audited: A configuration read: a key is answered by its prefix, never its secret, and no read of it is Call content. |
| Released in | 1.51.0 |
| Phase 0 host | Served (the hosted api pins 1.65.0) |
Answers the Organization's keys newest first, by prefix, never the secret (1.51.0); revoked and expired keys stay listed for the audit trail. environment and status filter the list, and a cursor binds them. A developer manages test keys only (access-control-and-isolation.md section 4.2), so its reads answer test keys only and a live key of the Organization is not_found to it. Session only (api.md section 2): the api refuses the route to every API key with forbidden, whatever its scopes; Phase 0 accepts a Member ID token.
Request
Set VOCAL_API to the base URL of your API and VOCAL_API_KEY to an API key with the api_keys:read scope (Authentication and keys). Replace each placeholder, such as agt_... or <name>, with your own value.
curl "$VOCAL_API/v1/api-keys" \
-H "Authorization: Bearer $VOCAL_API_KEY"const response = await fetch(`${process.env.VOCAL_API}/v1/api-keys`, {
headers: {
Authorization: `Bearer ${process.env.VOCAL_API_KEY}`,
},
});
console.log(response.status, await response.text());import os
import requests
response = requests.get(
f"{os.environ['VOCAL_API']}/v1/api-keys",
headers={
"Authorization": f"Bearer {os.environ['VOCAL_API_KEY']}",
},
)
print(response.status_code, response.text)Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
limit | query | integer | no | The page size, 1 to 100. |
cursor | query | string | no | The opaque next_cursor of the previous page; it binds the filters it was issued under. |
environment | query | Environment | no | Only the keys of this environment (1.51.0). |
status | query | ApiKeyStatus | no | Only the keys in this status (1.51.0). |
Responses
| Status | Content type | Shape | Error codes |
|---|---|---|---|
200 | application/json | ApiKeyList | |
400 | application/json | ErrorEnvelope | invalid_request, invalid_cursor |
401 | application/json | ErrorEnvelope | unauthenticated |
403 | application/json | ErrorEnvelope | forbidden |
429 | application/json | ErrorEnvelope | rate_limited |
500 | application/json | ErrorEnvelope | internal_error |
Fields of the 200 answer
The shape is ApiKeyList.
| Field | Type | Required | Description |
|---|---|---|---|
data | array of ApiKey | yes | The API keys of this page, newest first. |
has_more | boolean | yes | True when a further page exists. |
next_cursor | string or null | yes | The cursor of the next page, or null on the last page. |
object | "list" | yes |