---
title: "List hosted tenant API keys without raw key material"
method: GET
path: "/tenant/api-keys"
---

# List hosted tenant API keys without raw key material

`GET /tenant/api-keys`

## Request

- Base URL: `https://api.gravityads.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.gravityads.dev/tenant/api-keys`
- Auth: HTTP bearer

## Response `200`

Tenant API keys

- object
  - `status` 'tenant_api_key_status_ready' | 'tenant_api_keys_failed' | 'error', required
  - `source` string
  - `tenant_id` string, required
  - `key_count` integer, required
  - `keys` object[], required
    - `id` string
    - `tenant_id` string
    - `label` string
    - `key_fingerprint` string
    - `scopes` string[]
    - `missing_recommended_scopes` string[]
    - `mcp_capability_status` string
    - `status` string
    - `created_by_user_id` string
    - `expires_at` string
    - `created_at` string
    - `updated_at` string
    - `revoked_at` string
    - `revoked_reason` string
  - `plan_id` string
  - `recommended_mcp_scopes` string[]
  - `active_key_count` integer
  - `plan_capable_active_key_count` integer
  - `requires_scope_rotation` boolean
  - `missing_recommended_scopes` string[]
  - `scope_migration` object
  - `hosted_auth_context` object
  - `raw_key_returned` false, required
  - `raw_secrets_returned` false, required

---

[API](https://skmtc.dev/gravityads/apis/gravityads-api.md) · [All operations](https://skmtc.dev/gravityads/apis/gravityads-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gravityads/apis/gravityads-api/revisions/124cd07d534d?raw)