---
title: "List API keys"
method: GET
path: "/v1/api-keys"
tags: ["API Keys"]
---

# List API keys

`GET /v1/api-keys`

List the API keys for the tenant. Tokens are masked in this response — the full token is only returned when you create or rotate a key. Callers without API-key management permission see only their own key. The response is a bare JSON array ordered by most recent creation time.

## Response `200`

A bare JSON array of API key objects (tokens masked).

- object[]
  - `uuid` string, uuid — You receive the UUID for this API key.
  - `name` string — You receive the API key name.
  - `environment` string — You receive the environment for this key: `sandbox` or `prod`.
  - `role` string — You receive the role granted to this key.
  - `created_at` string, date-time — You receive the timestamp when the key was created.
  - `member_email` string — You receive the member email the key belongs to, or an empty string for a tenant-level key.
  - `token_last4` string — You receive the last 4 characters of the token.
  - `masked` string — You receive the masked token for display.

---

[API](https://skmtc.net/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.net/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/versions/e4eddba66557/schema)