---
title: "List API keys and their permissions"
method: GET
path: "/auth/api-keys"
tags: ["API keys"]
---

# List API keys and their permissions

`GET /auth/api-keys`

## Request

- Base URL: `https://api.receiptor.ai/v1`
- URL: `https://api.receiptor.ai/v1/auth/api-keys`
- Auth: HTTP bearer

## Response `200`

Successful response

- object
  - `success` boolean
  - `code` integer
  - `data` ApiKey[]
    - `_id` string
    - `name` string
    - `key` string: Full credential only on creation; masked in lists.
    - `workspaceScope` 'all' | 'current'
    - `orgId` string, nullable
    - `active` boolean
    - `permissions` string[]
    - `createdAt` string, date-time
    - `lastUsed` string, date-time

## Other responses

- `401`: Authentication required

## Changes

- **2026-10-25** `a2d8aea5337a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/receiptor/apis/receiptor-ai-api/changes/auth/api-keys/get.md)

---

[API](https://skmtc.dev/receiptor/apis/receiptor-ai-api.md) - [All operations](https://skmtc.dev/receiptor/apis/receiptor-ai-api/llms.txt) - [OpenAPI document](https://skmtc.dev/receiptor/apis/receiptor-ai-api/revisions/a2d8aea5337a?raw)