---
title: "List the caller's API keys (first-party, JWT-authenticated)"
method: GET
path: "/api/v1/keys"
tags: ["API Keys"]
---

# List the caller's API keys (first-party, JWT-authenticated)

`GET /api/v1/keys`

## Request

- Base URL: `https://api.reconcileiq.com`
- URL: `https://api.reconcileiq.com/api/v1/keys`
- Auth: HTTP bearer

Lists all keys owned by the logged-in web user, newest first. Secrets are never returned. JWT-authenticated, not API-key-authenticated.

## Response `200`

Keys owned by the caller.

- object
  - `keys` object[], required
    - `id` integer
    - `name` string
    - `prefix` string
    - `scopes` Scope[]
    - `allow_overage` boolean
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable
    - `revoked_at` string, date-time, nullable

## Other responses

- `401`: First-party web-session (JWT) auth failure on a /api/v1/keys endpoint. Standard error envelope, identical in shape to API-key auth failures: `401 unauthorized` when the token is missing, `401 invalid_token` when it is invalid or expired.

---

[API](https://skmtc.dev/reconcileiq/apis/reconcileiq-public-api.md) · [All operations](https://skmtc.dev/reconcileiq/apis/reconcileiq-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/reconcileiq/apis/reconcileiq-public-api/revisions/5401beef8653?raw)