Account

List consumer's active API keys

Returns the consumer's active (non-revoked) API keys as a JSON array. Response shape deliberately omits key_hash (NEVER leaves the server) and the plaintext key (returned only ONCE in the POST 201 response). Session-cookie auth — see /api/v1/account/me for the auth-model rationale. Cross-tenant isolation enforced by the route handler's explicit .eq('consumer_id', $1) filter AS WELL AS RLS on api_keys.

get/api/v1/account/keys

Request

Base URL: https://www.apier.no
URL: https://www.apier.no/api/v1/account/keys
Auth: API key in cookie sb-access-token

Response

Active keys for the signed-in consumer.

successtrue required

Example response

{
  "_meta": {
    "rulebook_version": "v1.0.0",
    "source": "apier.no",
    "data_source": "Brønnøysund Enhetsregisteret + Apier Universal Rulebook",
    "schema_version": "1.0.0",
    "legal_basis": "NLOD — public registry reuse",
    "response_timestamp": "2026-04-24T12:00:00.000Z",
    "response_hash": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
    "source_snapshot_id": "brreg-2026-04-24T02:00:00.000Z",
    "cost_nok": 0.5,
    "wallet_remaining_nok": 9.5,
    "spend_cap_remaining_nok": 12.5
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.