---
title: "List Harbor Keys"
method: GET
path: "/api/harbors/{harbor_id}/keys"
tags: ["Harbors"]
---

# List Harbor Keys

`GET /api/harbors/{harbor_id}/keys`

Lists active masked credentials for a Harbor.

Each item contains a masked `key_hint`. Polytomic never returns a credential plaintext after creation.

## Path parameters

- `harbor_id` string, uuid, required — Unique identifier of the Harbor.

## Query parameters

- `limit` integer — Maximum number of active credentials to return. Defaults to 50 and cannot exceed 50.
- `page_token` string — Opaque pagination cursor returned by the previous request.

## Headers

- `X-Polytomic-Version` string

## Response `200`

OK

- HarborKeyListEnvelope
  - `data` HarborKeyResponse[], nullable
    - `calls_last_24_hours` integer — Recorded API calls made with this credential in the last 24 hours.
    - `client_name` string, nullable — OAuth client that issued this credential, when applicable.
    - `created_at` string, date-time — When the credential was created.
    - `expires_at` string, date-time, nullable — When the credential expires. Omitted for durable credentials.
    - `id` string, uuid — Unique identifier of the credential.
    - `key_hint` string — Masked credential hint. Never contains the plaintext credential.
    - `mode` string — Credential authorization mode.
  - `pagination` PaginationDetails
    - `next_page_token` string

## Other responses

- `403` — Forbidden
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.net/polytomic/apis/polytomic-api.md) · [All operations](https://skmtc.net/polytomic/apis/polytomic-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/polytomic/polytomic-api/revisions/00c653316d35/schema)