api-keys

List API keys for the authenticated tenant (no plaintext or hash).

Return all API keys (active and revoked) for the authenticated tenant.

key_hash and plaintext are NEVER present in the response (AC #4, STRIDE I1/I3). RLS on the tenant session automatically scopes results to the current tenant; the explicit WHERE clause below is defence-in-depth against IDOR (AC #8).

Also reports active_key_count / active_key_limit (FREE-TIER-TIGHTEN AC #5) so the Dashboard can render "used N of M" without hardcoding tier numbers. A tenant row that cannot be resolved (edge case: deleted mid-request) falls back to the default (most restrictive) limit rather than failing the whole list request.

get/v1/api-keys

Request

  • Base URL: https://api.andish.ru (the document declares no server; this is the origin it was published from)
  • URL: https://api.andish.ru/v1/api-keys
  • Auth: none declared

Response

Successful Response

active_key_countinteger required

Number of currently active (non-revoked) API keys for this tenant.

active_key_limitinteger nullable required

Tier's active-key limit. None means unlimited (business/enterprise). The Dashboard must render this value, not a hardcoded number.

Changes

No recorded changes to this operation across all 1 revision of this API.