---
title: "List API keys"
method: GET
path: "/v1/keys"
tags: ["Keys"]
---

# List API keys

`GET /v1/keys`

## Request

- Base URL: `https://dnsmint.com/api`
- URL: `https://dnsmint.com/api/v1/keys`
- Auth: HTTP bearer

Every live key on the team, metadata only. Secrets are never returned here; a secret exists once, in the response that created it. Requires the keys:write scope.

## Response `200`

The account's keys

- ApiKeyList
  - `keys` ApiKeySummary[]
    - `key_id` string: The id half of dnsm_<key_id>_<secret>.
    - `name` string
    - `scopes` object[]
      - `scope` 'hostnames:read' | 'hostnames:write' | 'dns01:write' | 'keys:write'
      - `on` string: The domain or hostname this scope is narrowed to. Absent means the whole team.
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable
    - `expires_at` string, date-time, nullable: Null for a key that does not expire.
    - `created_by_key_id` string, nullable: The key that minted this one, or null when a person created it in the dashboard.
    - `expired` boolean

## Other responses

- `401`: Missing, invalid or expired key
- `403`: Key does not carry keys:write

---

[API](https://skmtc.dev/dnsmint/apis/dnsmint-api.md) · [All operations](https://skmtc.dev/dnsmint/apis/dnsmint-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dnsmint/apis/dnsmint-api/revisions/98fb1f87725a?raw)