---
title: "List user API keys"
method: GET
path: "/api_keys"
tags: ["ApiKeys"]
---

# List user API keys

`GET /api_keys`

This endpoint lets you list all the API keys you have access to.

For more details on how API keys work, and how to handle them securely, see the [Security and API Key Usage](/guides/api/resources/settings/security_and_api_key_usage) guide.

## Query parameters

- `page` integer
- `per_page` integer
- `status` 'active' | 'inactive' | 'disabled' | 'expired'
- `type` 'bot' | 'user'
- `search_text` string
- `include_all_permissions` boolean

## Response `200`

OK

- object
  - `page` integer — Current page number
  - `max_page` integer — Last page number
  - `count` integer — Number of resources complying with filters
  - `api_keys` ApiKey[] — List of API keys
    - `id` integer
    - `label` string — Name given to recognize the Api key
    - `description` string — Description of the API key
    - `user_id` string — User id
    - `user_name` string — User first name and last name concatenated. Can be null if it's your org integration api key.
    - `user_role` 'PROVIDER' | 'ORG_ADMIN' | 'ORG_MANAGER' | 'GROUP_MANAGER' | 'BUSINESS_MANAGER' | 'PUBLISHER' — User role in the application
    - `user_type` 'bot' | 'user' — Whether the API key belongs to a bot user (created automatically for integrations) or a regular human user.
    - `disabled` boolean — Is true if someone revoked the key.
    - `expiration_date` string — Must be at least the day after today. If you want it to expire today you must revoke it. You can set it to null.
    - `last_used_at` string
    - `created_by` string — User id
    - `created_by_name` string — First name and last name concatenated of the user that created the key
    - `created_at` string
    - `revoked_by` string — User id
    - `revoked_by_name` string — First name and last name concatenated of the user that revoked the key
    - `revoked_at` string
    - `ip_whitelist` string[] — List of IP or CIDR network notations to which API Key calls are restricted. Empty list means no restriction.
    - `has_restricted_permissions` boolean — Whether or not the API key has customized permissions. If false, it has the same permissions as the user who created the key.
    - `permissions` string[] — List of permission names linked to the API Key.

## Other responses

- `400` — Your request is incorrect
- `401` — You are not authenticated

---

[API](https://skmtc.net/partoo/apis/partoo-rest-api.md) · [All operations](https://skmtc.net/partoo/apis/partoo-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/partoo/partoo-rest-api/revisions/3652d8b1a8b3/schema)