---
title: "List active API keys you can manage (cookie session only)"
method: GET
path: "/api/v1/keys"
tags: ["API Keys"]
---

# List active API keys you can manage (cookie session only)

`GET /api/v1/keys`

## Request

- Base URL: `https://qrlia.dev.castlesoft.eu`
- URL: `https://qrlia.dev.castlesoft.eu/api/v1/keys`
- Auth: API key in cookie `qrc_session`

## Response `200`

Keys

- object
  - `items` ApiKey[], required
    - `id` string, uuid, required
    - `name` string, required
    - `prefix` string, required: Visible 12-char prefix (e.g. `qrc_abc123_…`). The full key is shown ONCE on creation.
    - `companyId` string, uuid, nullable, required
    - `createdAt` string, date-time, required
    - `lastUsedAt` string, date-time, nullable, required
    - `revokedAt` string, date-time, nullable, required
  - `next` string, nullable

## Other responses

- `400`: Validation failed
- `401`: Authentication required
- `403`: Forbidden
- `404`: Not found
- `409`: Conflict
- `500`: Internal

---

[API](https://skmtc.dev/qrlia/apis/qrlia-api.md) · [All operations](https://skmtc.dev/qrlia/apis/qrlia-api/llms.txt) · [OpenAPI document](https://skmtc.dev/qrlia/apis/qrlia-api/revisions/01c5dd6002ab?raw)