---
title: "Permissions of the API key making this request."
method: GET
path: "/api/user/api-keys/current"
tags: ["Account & API keys"]
---

# Permissions of the API key making this request.

`GET /api/user/api-keys/current`

## Request

- Base URL: `https://api.binibit.com`
- URL: `https://api.binibit.com/api/user/api-keys/current`
- Auth: none declared

Lets a client verify what a key can do without exercising the permission — in particular,
confirming that a trading key cannot withdraw no longer means attempting a withdrawal.

## Response `200`

OK

- ApiKeyInfoViewModel: What the calling API key is allowed to do, and who it belongs to.
  - `publicKey` string, nullable: The key used to authenticate this request.
  - `userId` string, nullable: Owner of the key — the same id that appears on orders and deals.
  - `description` string, nullable: Free-text label set when the key was created.
  - `dateCreated` string, date-time: When the key was issued.
  - `canTrade` boolean: Place and cancel orders.
  - `canReadUserInfo` boolean: Read orders, deals and balances.
  - `canWithdraw` boolean: Request withdrawals. Read this instead of probing the withdrawal endpoint — a key with canWithdraw=false is rejected before any withdrawal logic runs.
  - `ipWhitelist` string[], nullable: Addresses this key may call from. Empty means no restriction; when non-empty, requests from any other address are refused with 403.

## Changes

- **2026-10-13** `13dbac1613c4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/binibit/apis/webapp/changes/api/user/api-keys/current/get.md)

---

[API](https://skmtc.dev/binibit/apis/webapp.md) - [All operations](https://skmtc.dev/binibit/apis/webapp/llms.txt) - [OpenAPI document](https://skmtc.dev/binibit/apis/webapp/revisions/13dbac1613c4?raw)