Settings

Get the calling API key metadata

Returns the calling API key redacted metadata (id, name, key_prefix, environment, scopes) for agent self-inspection. Never returns key_hash. Requires API-key auth — a JWT session has no single-key context and receives 400. (h-dashboard-per-key-api)

get/api/v1/me/api-key

Request

Base URL: https://api.proof.holdings
URL: https://api.proof.holdings/api/v1/me/api-key
Auth: one of:
- HTTP bearer
- API key in cookie auth_token

Response

The calling API key (redacted)

idstring required

MongoDB ObjectId

namestring required

key_prefixstring required

environment'production' | 'test' required

scopesstring[] required

profile_idstring

MongoDB ObjectId

created_atstring date-time required

last_used_atstring date-time nullable

When the key last authenticated a request; null if never

expires_atstring date-time nullable

When the key stops authenticating; null means it never expires. Enforced at authentication — an expired key is rejected exactly like an unknown one.

revoked_atstring date-time nullable

When the key was revoked; null while it is live

replaced_key_idsObjectId[]

Ids of the keys this key replaced, newest first: the earlier keys of the same integration, replaced when the key was regenerated (POST /api/v1/me/api-keys/{id}/regenerate) or renewed by an MCP sign-in refresh. Requests and usage of those keys count as this key's. Empty when it replaced none. Recorded from the release of key history on; a key replaced before it is not linked.

Example response

{
  "id": "507f1f77bcf86cd799439011",
  "name": "Production Key",
  "key_prefix": "pk_live_",
  "environment": "production",
  "scopes": [
    "verifications:*"
  ],
  "profile_id": "507f1f77bcf86cd799439011",
  "replaced_key_ids": [
    "507f1f77bcf86cd799439011"
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.