Lists the API keys of your team. Callers holding only own-scope read permission see just the keys they created.
Permission required: service_account:read (all keys) or service_account:read (your own keys only)
When owner_principal_id names another member: service_account:read (all keys)
Query Parameters
Number of items per page (1–100)
Token from the previous page. Opaque — do not construct or parse it.
Case-insensitive substring match on the key name
Only keys in this state (the status field). One of: enabled, disabled, expired.
Only keys owned by this member (owner.principal_id). With permission to read only your own keys, any principal_id other than yours is refused (403).
Response
Show Load More Response API Key object
List of items in the current page Client IPs or CIDR ranges this key may be used from. Empty array = no restriction.
Creation time, Unix seconds
Stable identifier of this API key
true for keys the platform created for its own use (for example the console playground)
First 8 characters of the key body. The full key is never returned by read endpoints.
Current state of the key. One of: enabled, disabled, expired.
Fallback model-routing group. Omitted = none.
Expiry time, Unix seconds. Omitted when the key never expires.
Model-routing group the key’s requests use. Omitted = the owner’s own group.
Last 4 characters of the key, to match a key someone holds without returning it. Omitted for keys whose plaintext is not retained.
Time this key was last used, Unix seconds. APPROXIMATE — updates are throttled and may lag by up to one hour. Omitted when the key has never been used.
Member this key acts as — its requests carry this member’s permissions and usage is attributed to them. For a key issued to a virtual member, that member. Omitted when the account no longer exists. Show API Key Owner object
Display name of the member
human = joined via invitation, virtual = managed identity created by an owner/admin
principal_id of the member (see GET /members)
Token to fetch the next page; absent on the last page
Total number of items matching the filter across all pages; omitted when the count is unavailable
Errors
Errors answer with success: false, a message and an error_code. See Error Codes for every code.