---
title: "List API keys"
method: GET
path: "/o/{orgId}/api-key/keys"
---

# List API keys

`GET /o/{orgId}/api-key/keys`

Retrieve a list of all API keys for the organization. Returns metadata only; raw keys are never exposed after creation.

## Path parameters

- `orgId` string, required

## Response `200`

API keys retrieved successfully

- ApiKeyMetadata[]
  - `id` string, required — Unique identifier for the API key
  - `name` string, required — Human-readable name for the API key
  - `created` string, date-time, required — Timestamp when the key was created
  - `user` union, required — User or service account that created the key
    - P0User
      - `uid` string, required — User unique identifier
      - `email` string, email, required — User email address
    - ApiUser
      - `isApiUser` true, required — Indicates this is a service account
      - `uid` string, required — Service account unique identifier
      - `name` string, required — Service account name

## Other responses

- `401` — Unauthorized
- `403` — Forbidden - User lacks apikey.metadata.read permission

---

[API](https://skmtc.net/p0/apis/p0-api-key-management-api.md) · [All operations](https://skmtc.net/p0/apis/p0-api-key-management-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/p0/p0-api-key-management-api/revisions/6111381d0e11/schema)