---
title: "List Api Keys"
method: GET
path: "/v1/orgs/{org_id}/api-keys"
tags: ["v1-api-keys"]
---

# List Api Keys

`GET /v1/orgs/{org_id}/api-keys`

List all API keys for the organization.

Requires 'api_keys.read' permission.

Returns:
    List of API keys (without secret keys)

## Path parameters

- `org_id` string, required

## Response `200`

Active (unrevoked) keys, newest first.

- APIKeyListItem[]
  - `id` string, required — API key ID.
  - `name` string, required — Human-readable key name.
  - `key_prefix` string, required — First characters of the key; the secret itself is never returned.
  - `scopes` string[], required — Permission scopes granted to the key.
  - `expires_at` string, nullable — When the key expires. Null when it does not expire.
  - `revoked_at` string, nullable — When the key was revoked. Null for active keys.
  - `created_at` string, required — When the key was created.
  - `last_used_at` string, nullable — When the key last authenticated a request. Null when never used.
  - `users` object, nullable — Who created the key: `{email, full_name}`.

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/tryardent/apis/fastapi.md) · [All operations](https://skmtc.net/tryardent/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tryardent/fastapi/revisions/71b66f68e19c/schema)