---
title: "List API keys"
method: GET
path: "/api-keys"
tags: ["API Keys"]
---

# List API keys

`GET /api-keys`

Lists reveal-safe API key metadata for the workspace. Requires api_keys:read on the calling key and a live admin/owner membership. Secrets are never returned.

## Query parameters

- `cursor` string — Opaque cursor returned by data.page_info.next_cursor. Omit for the first page.
- `limit` integer — Maximum API keys to return. Defaults to 50.

## Response `200`

Workspace API keys.

- ApiKeyListResponse — Workspace API key metadata response. Secrets are never included.
  - `data` object, required — API key list data.
    - `items` ApiKey[], required — API keys.
      - `id` string, required — Stable API key identifier.
      - `key_prefix` string, required — Non-secret prefix for operator recognition.
      - `name` string, nullable, required — Optional operator-facing key label.
      - `scopes` string[], required — Exact scopes granted to the key.
      - `status` 'active' | 'disabled' | 'revoked', required — Credential lifecycle status.
      - `subject` ApiKeySubject, required — Workspace identity the credential acts as.
        - `display_name` string, nullable, required — Current subject display name.
        - `principal_type` 'agent' | 'user', required — Subject principal type.
        - `workspace_membership_id` string, required — Subject workspace membership identifier.
    - `page_info` object, required — Opaque cursor pagination metadata.
      - `has_next_page` boolean, required — Whether another page of API keys is available.
      - `next_cursor` string, nullable, required — Opaque cursor for the next page, or null when complete.

## Other responses

- `400` — Bad request.
- `401` — Missing or invalid API key.
- `403` — Forbidden.
- `404` — Not found.
- `409` — Conflict.
- `429` — Rate limit or quota exceeded.
- `500` — Internal server error.

---

[API](https://skmtc.net/ando/apis/ando-public-api.md) · [All operations](https://skmtc.net/ando/apis/ando-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ando/ando-public-api/revisions/0a94056fba48/schema)