---
title: "List your API keys for this API"
method: GET
path: "/v1/keys"
---

# List your API keys for this API

`GET /v1/keys`

## Request

- Base URL: `https://agentmandate-api.com`
- URL: `https://agentmandate-api.com/v1/keys`
- Auth: HTTP bearer

Every key on YOUR account for this API — label, non-secret prefix, status, when it was created, when it was last used, and what it has consumed this period. Authenticate with any active key on the account; the account is taken from that key, never from a parameter, so this can only ever return your own keys. Keys you hold for other APIs in the portfolio are not listed here. Secrets are not returned and cannot be: only a peppered hash is stored. Free, and consumes no quota.

## Response `200`

Success

- object
  - `product` string
  - `accountId` string
  - `keys` object[]
    - `id` string
    - `name` string: The label given at creation.
    - `prefix` string: Non-secret leading characters, so you can tell two keys apart without holding either.
    - `status` 'active' | 'revoked'
    - `createdAt` string, date-time
    - `lastUsedAt` string, date-time, nullable: Null if the key has never been used.
    - `revokedAt` string, date-time, nullable
    - `quotaPerPeriod` integer, nullable
    - `usedInPeriod` integer
    - `current` boolean: True for the key that authenticated this request.
  - `requestId` string

## Other responses

- `400`: Deterministic error. Branch on `code`; quote `requestId` when reporting a problem.
- `401`: Deterministic error. Branch on `code`; quote `requestId` when reporting a problem.
- `429`: Deterministic error. Branch on `code`; quote `requestId` when reporting a problem.
- `500`: Deterministic error. Branch on `code`; quote `requestId` when reporting a problem.

---

[API](https://skmtc.dev/agentmandate-api/apis/agent-mandate.md) · [All operations](https://skmtc.dev/agentmandate-api/apis/agent-mandate/llms.txt) · [OpenAPI document](https://skmtc.dev/agentmandate-api/apis/agent-mandate/revisions/463fe122c4d8?raw)