LIlilt
API Keys

List API keys

Changed on

Retrieve all non-deleted API keys scoped to the caller's current organization.

Callers with the apiKey.read permission see all keys in the organization; all other callers see only their own keys. The plaintext secret is never returned by this endpoint — only the key prefix is shown.

get/v2/api-keys

Request

  • Base URL
    https://api.lilt.com
  • URL
    https://api.lilt.com/v2/api-keys
  • Auth
    HTTP basic

Response

An array of API key objects.

idstring required

The unique identifier for the API key.

namestring required

A human-readable label for the key.

prefixstring required

The first 8 characters of the key's random portion — the part that follows the lilt_ prefix. Safe to display.

createdAtstring date-time required

ISO-8601 timestamp when the key was created.

expiresAtstring date-time nullable

ISO-8601 timestamp when the key expires, or null if it does not expire.

lastUsedAtstring date-time nullable

ISO-8601 timestamp of the last successful authentication, or null.

revokedAtstring date-time nullable

ISO-8601 timestamp when the key was revoked, or null if still active.

ownerEmailstring nullable

Email address of the user who owns the key. Returned by the list endpoint; omitted by GET /v2/api-keys/{id}.

ownerUserIdinteger nullable

Numeric identifier of the user who owns the key. Returned by the list endpoint; omitted by GET /v2/api-keys/{id}.

Example response

[
  {
    "id": "uuid-1234",
    "name": "CI bot",
    "prefix": "aaaaaaaa",
    "createdAt": "2026-04-29T00:00:00Z",
    "expiresAt": "2027-01-01T00:00:00Z",
    "lastUsedAt": "2026-05-01T12:00:00Z",
    "ownerEmail": "developer@lilt.com",
    "ownerUserId": 42
  }
]

Changes