---
title: "List Keys"
method: GET
path: "/v1/keys"
tags: ["keys"]
---

# List Keys

`GET /v1/keys`

List the API keys in the caller's organization.

Requires master key authentication. An unset ``workspace_id`` lists every key
in that organization; naming a workspace in another one lists nothing rather
than refusing, so the filter reports no more than the unfiltered read does.

## Query parameters

- `skip` integer
- `limit` integer
- `workspace_id` string, uuid, nullable — Only keys in this workspace.

## Response `200`

Successful Response

- KeyInfo[]
  - `allowed_models` string[], nullable, required
  - `capture_agent_telemetry` boolean, nullable, required
  - `created_at` string, required
  - `exclude_from_budget` boolean, required
  - `expires_at` string, nullable, required
  - `id` string, required
  - `is_active` boolean, required
  - `key_name` string, nullable, required
  - `key_prefix` string, nullable, required
  - `last_used_at` string, nullable, required
  - `metadata` object, required
  - `reject_user_mismatch` boolean, nullable, required
  - `user_id` string, nullable, required
  - `workspace_id` string, uuid, required

## Other responses

- `422` — Validation Error

## Changes

> 126 revisions in range; 96 could not be searched.

- **2026-04-17** `0f43605bdc13` — 1 info
  - the endpoint scheme security `ApiKeyAuth` was removed from the API

[Change history](https://skmtc.dev/mozilla-ai/apis/otari/changes/v1/keys/get.md)

---

[API](https://skmtc.dev/mozilla-ai/apis/otari.md) · [All operations](https://skmtc.dev/mozilla-ai/apis/otari/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mozilla-ai/otari/revisions/7f178e92b56c/schema)