---
title: "Get Company Api Key"
method: GET
path: "/companies/{company_id}/api-key"
tags: ["companies"]
---

# Get Company Api Key

`GET /companies/{company_id}/api-key`

## Request

- Base URL: `https://api.nanocorp.so` (the document declares no server; this is the origin it was published from)
- URL: `https://api.nanocorp.so/companies/{company_id}/api-key`
- Auth: HTTP bearer

The company's permanent API key. The first read mints it (D-9/D-14), so
there is no 404/empty state. The raw token is returned to the owner:
it is their own credential and every sandbox env already carries it;
``Cache-Control: no-store`` keeps it out of shared caches.

## Path parameters

- `company_id` string, uuid, required

## Response `200`

Successful Response

- CompanyApiKeyResponse: The company's permanent API key (2026-08-07 spec §6). The raw ``token`` is returned to the owner on every read (D-9): it is the owner's own credential and every sandbox env already carries it. Responses are served with ``Cache-Control: no-store``.
  - `token` string, required
  - `key_prefix` string, required
  - `created_at` string, date-time, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/nanocorp/apis/nanocorp-api.md) - [All operations](https://skmtc.dev/nanocorp/apis/nanocorp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/nanocorp/apis/nanocorp-api/revisions/291bb76b720b?raw)