---
title: "List API keys"
method: GET
path: "/v1/api-keys"
tags: ["API Keys"]
---

# List API keys

`GET /v1/api-keys`

## Request

- Base URL: `https://api.letmepost.dev`
- URL: `https://api.letmepost.dev/v1/api-keys`
- Auth: none required

Dashboard session only. Plaintext is never returned again — only `last4` and metadata.

## Response `200`

Active and revoked keys for the active org.

- ApiKeyListResponse
  - `data` ApiKey[], required
    - `id` string, required
    - `name` string, required
    - `prefix` string, required
    - `last4` string, required
    - `scopes` string[], required
    - `profileId` string, nullable
    - `createdAt` string, date-time, required
    - `lastUsedAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable

## Other responses

- `401`: `unauthenticated` — missing or invalid Bearer key.
- `429`: `rate_limited` — too many requests. Inspect `X-RateLimit-Limit` (static ceiling) and the IETF-draft `RateLimit-*` headers (sliding-window remaining/reset) before retrying.

---

[API](https://skmtc.dev/letmepost/apis/letmepost-dev-api.md) · [All operations](https://skmtc.dev/letmepost/apis/letmepost-dev-api/llms.txt) · [OpenAPI document](https://skmtc.dev/letmepost/apis/letmepost-dev-api/revisions/f6659001f96b?raw)