Lists API key metadata for the authenticated key's organization, including each key's creator (ID, current name and email), creation date, scope and revocation status. Requires a global API key; website-scoped keys receive 403. No organization ID is accepted. Secrets and hashes are never returned. Revoked keys are included so you can detect a key created and revoked between polls. Results are ordered by creation date ascending, then ID ascending.

For new-key alerts, first record a baseline of key IDs. On each poll, pin until to now minus one minute, overlap since with the previous successful window, and keep both bounds fixed while incrementing page_num until pagination.has_more is false. Both time bounds are inclusive. Deduplicate alerts by key ID and advance your saved window only after all pages succeed. Filter is_revoked locally if you need active keys only.

This is a current inventory, not a durable audit log or webhook: deleting a creator's account removes their keys, and concurrent deletions can shift pages. Overlapping windows reduce polling gaps but cannot guarantee detection of every creation. The MCP tool list_api_keys exposes the same fields and filters to global API keys and organization-admin OAuth connections, subject to MCP permissions.