---
title: "List API keys for the current organization."
method: GET
path: "/api/v1/admin/api-keys"
tags: ["Administration"]
---

# List API keys for the current organization.

`GET /api/v1/admin/api-keys`

## Request

- Base URL: `https://erp.eyeot.fr/api/v1`
- URL: `https://erp.eyeot.fr/api/v1/api/v1/admin/api-keys`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

List API keys for the current organization.

    Query params :
    - include_revoked (bool, default false) — inclut aussi les clés révoquées.

**Permissions requises** : `admin:api_keys`

## Response `200`

Succès — payload `{data, meta}` (cf. API-GUIDE §3.1)

- object
  - `data` ApiKeyResponse[]
    - `created_at` string, date-time
    - `created_by_user_id` string, uuid, nullable
    - `expires_at` string, date-time, nullable
    - `id` string, uuid
    - `is_active` boolean: False si revoked OU expired.
    - `key_prefix` string: Préfixe public (8 hex). Le token complet est `eyk_<prefix>_<secret>`.
    - `last_used_at` string, date-time, nullable
    - `last_used_ip` string, nullable
    - `name` string
    - `organization_id` string, uuid
    - `revoked_at` string, date-time, nullable
    - `revoked_by_user_id` string, uuid, nullable
    - `scopes` string[]
  - `meta` PaginationMeta: Métadonnées de pagination cursor (cf. API-GUIDE §6).
    - `limit` integer
    - `next_cursor` string, nullable
    - `prev_cursor` string, nullable
    - `total_count` integer

## Other responses

- `401`: JWT manquant, expiré ou révoqué.
- `402`: L'organisation n'a pas d'abonnement actif (paywall). Rediriger vers /activate.
- `403`: Permissions `module:action` insuffisantes pour cette route.
- `404`: Ressource introuvable (ou cross-tenant — équivalent à hidden).
- `429`: Trop de requêtes. Honorer le header `Retry-After` (secondes).

---

[API](https://skmtc.dev/eyeot/apis/eyeot-erp-api.md) · [All operations](https://skmtc.dev/eyeot/apis/eyeot-erp-api/llms.txt) · [OpenAPI document](https://skmtc.dev/eyeot/apis/eyeot-erp-api/revisions/42ab95222a89?raw)