---
title: "List Api Keys"
method: GET
path: "/api/v1/api-keys"
tags: ["API Keys"]
---

# List Api Keys

`GET /api/v1/api-keys`

List API key metadata for the current business.

Returns only non-sensitive metadata (id, masked prefix, scopes, dates,
legacy flag). The plaintext key value is never returned — it is shown only
once at creation. See SEC-21.

## Response `200`

Successful Response

- ListApiKeysResponse — Response model for listing API keys (metadata only). `api_keys` retains the legacy `List[str]` shape (masked prefixes only) so the pre-SEC-34 dashboard renders instead of throwing; `keys` carries the full metadata. Remove `api_keys` once SEC-34 ships and the UI reads `keys`.
  - `api_keys` string[], required
  - `keys` ApiKeyMetadata[], required
    - `id` string, required
    - `prefix` string, required
    - `name` string, nullable
    - `scopes` ApiKeyScope[]
    - `created_at` string, date-time, nullable
    - `expires_at` string, date-time, nullable
    - `last_used_at` string, date-time, nullable
    - `legacy` boolean
    - `created_by_email` string, nullable

---

[API](https://skmtc.dev/neosapien/apis/neocore.md) · [All operations](https://skmtc.dev/neosapien/apis/neocore/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/neosapien/neocore/revisions/8b94ef58f2cf/schema)