---
title: "List the keys of this organization"
method: GET
path: "/api/keys"
tags: ["Keys"]
---

# List the keys of this organization

`GET /api/keys`

## Request

- Base URL: `https://morfee.furo.solutions`
- URL: `https://morfee.furo.solutions/api/keys`
- Auth: one of:
  - API key in header `X-Api-Key`
  - HTTP bearer

Including the revoked and the expired ones, because "when did this stop working" is the question this list gets asked. `scopes` is the vocabulary, so a caller does not have to hard-code it.

Any scope may call this: every key may read.

## Response `200`

Every key, and the scopes that exist.

- object
  - `keys` ApiKey[]
    - `id` string
    - `name` string: What it is for. This is how you know which one to revoke later.
    - `prefix` string: The readable front of the key.
    - `scope` 'read' | 'render' | 'write' | 'full'
    - `createdAt` string, date-time
    - `createdBy` string, nullable
    - `lastUsed` string, date-time, nullable
    - `expiresAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
  - `scopes` string[]

## Other responses

- `401`: No key, an unknown key or a revoked one.

---

[API](https://skmtc.dev/furo/apis/morfee.md) · [All operations](https://skmtc.dev/furo/apis/morfee/llms.txt) · [OpenAPI document](https://skmtc.dev/furo/apis/morfee/revisions/83f95f89653f?raw)