Skip to main content
GET
List the calling tenant’s API keys. The plaintext key and the SHA-256 hash are never returned — only the metadata a caller could need for an audit dashboard (prefix, scopes, last_used_at, etc.). The current request’s key is flagged with is_current: true so callers can self-identify in the list.

Response

APIKeySummary[] — each element:
string
required
string
required
string
required
First 12 chars of the key (e.g. ‘sk_ss_aBc12’).
string[]
required
integer
required
boolean
required
string,null
string,null
string
required
boolean
True for the key making this request (callers can self-identify).

Status codes