List credentials you issued to a customer

List only keys minted by the calling API key for this business. Secrets and hashes are never returned.

Requires businesses:write on an organization-wide API key. Another key in the same workspace cannot list keys you minted. Session-created and older keys with no minter attribution remain managed through the dashboard.

Includes active, expired and revoked keys. expires_at and revoked_at can be null. limit defaults to 50, maximum 100; pass next_cursor as cursor for the next page. next_cursor is null when has_more is false.

SDK listKeys support follows in the next SDK release; call this REST endpoint until then. To replace a credential, mint a new one, deploy it, then revoke the old one. There is no in-place API rotation endpoint.

get/api/v1/businesses/{id}/keys

Request

Base URL: https://app.blueticked.com
URL: https://app.blueticked.com/api/v1/businesses/{id}/keys
Auth: HTTP bearer

Path parameters

idstring required

The resource's unique identifier.

Query parameters

limitinteger

Maximum number of items to return.

cursorstring uuid

Opaque pagination cursor. Pass the next_cursor from a previous response; do not construct it yourself.

Response

Success

has_moreboolean required

next_cursorstring uuid nullable required

request_idstring required

Example response

{
  "data": [
    {
      "id": "44444444-4444-4444-9444-444444444444",
      "name": "Acme reporting",
      "prefix": "blu_live_z9y",
      "scopes": [
        "contacts:read"
      ],
      "created_at": "2026-10-15T00:00:00.000Z",
      "expires_at": "2027-01-01T00:00:00.000Z",
      "revoked_at": "2026-10-15T01:00:00.000Z"
    }
  ],
  "has_more": true,
  "next_cursor": "44444444-4444-4444-9444-444444444444",
  "request_id": "req_b2e3d610e10f1b07468721ee98f0e1d2"
}

Changes

No recorded changes to this operation across all 1 revision of this API.