keys

Your API keys and what each may do. Never the keys themselves.

Every key not revoked: in keys, key_id, name, prefix, created_at, last_used_at (updated at most every 5 minutes) and current (true for the key making this call); in access, per key_id, its scopes, credit_limit, credits_used (what runs started with it spent), expires_at and expired. scopes is the calling key's. The signup key is key_id "original". A key itself is never shown again. Needs admin. MCP: list_keys.

get/v1/keys

Request

Base URL: https://api.hookdetector.com (the document declares no server; this is the origin it was published from)
URL: https://api.hookdetector.com/v1/keys
Auth: none declared

Headers

authorizationstring nullable

Bearer hd_... from POST /v1/accounts or POST /v1/keys

Response

Successful Response

scopesstring[] required

what the key making this call may do

accessobject required

per key_id: its scopes, cap, spend and expiry

Example response

{
  "access": {
    "original": {
      "credits_used": 63,
      "expired": false,
      "scopes": [
        "read",
        "write",
        "research",
        "admin"
      ]
    }
  },
  "keys": [
    {
      "created_at": "2026-09-23T10:00:00.000000+00:00",
      "current": true,
      "key_id": "original",
      "last_used_at": "2026-09-23T10:00:00.000000+00:00",
      "name": "Original key",
      "prefix": "hd_AbCdEfGh"
    }
  ],
  "scopes": [
    "read",
    "write",
    "research",
    "admin"
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.