Requires iam.credentials.read on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api_key. Application API keys (including legacy API keys) and provider OAuth tokens cannot authorize IAM management endpoints. Use an existing IAM credential with these permissions, or create your first management credential in the Dashboard.

Never returns the credential secret.

{
  "data": {
    "id": "8Lp2QwVm4rT6sYxN0cDzB",
    "principal_id": "9Xf3LmQa2rP7sTuV0wYzB",
    "type": "api_key",
    "name": "Support worker key",
    "status": "active",
    "expires_at": 1799193600,
    "created_at": 1791417600,
    "updated_at": 1791417600
  }
}