---
title: "List API keys"
method: GET
path: "/api-keys"
tags: ["Box"]
---

# List API keys

`GET /api-keys`

Lists API key metadata only. Raw key secrets are not returned after creation/rotation. Results are scoped to the authenticated Box account.

## Response `200`

API key metadata.

- ApiKeysResponse
  - `ok` boolean, required
  - `type` string, required — Stable success envelope discriminator added by v1.
  - `apiKeys` ApiKey[], required
    - `id` string, required
    - `name` string, required
    - `keyPrefix` string, required
    - `keyLastFour` string, required
    - `createdAt` string, date-time, required
    - `lastUsedAt` string, date-time, nullable

## Other responses

- `401` — Missing or invalid bearer token.

---

[API](https://skmtc.dev/ascii/apis/box-public-api-v1.md) · [All operations](https://skmtc.dev/ascii/apis/box-public-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ascii/box-public-api-v1/revisions/82d576f82046/schema)