---
title: "List API keys"
method: GET
path: "/api-keys"
tags: ["API Keys"]
---

# List API keys

`GET /api-keys`

Returns all API keys for the current organization, including disabled ones. Key values are never returned after creation — only metadata like name, prefix, enabled state, and creation date.

## Response `200`

API keys retrieved successfully

- object
  - `data` object[], required
    - `id` string, required
    - `name` string, required
    - `prefix` string, required — Key prefix (rb_xxx)
    - `enabled` boolean, required — False when the key is disabled (soft-revoked)
    - `createdAt` integer, required — Unix ms
    - `lastUsedAt` integer, nullable, required
    - `expiresAt` integer, nullable, required

## Other responses

- `401` — Unauthorized

## Changes

- **2026-08-31** `fafe355d0698` — 1 info
  - the security scope `keys:read` was added to the endpoint's security scheme `bearerAuth`
- **2026-08-29** `4d10ec4266ee` — 1 info
  - api operation id `listApiKeys` was added

[Change history](https://skmtc.dev/rendobar/apis/rendobar-api/changes/api-keys/get.md)

---

[API](https://skmtc.dev/rendobar/apis/rendobar-api.md) · [All operations](https://skmtc.dev/rendobar/apis/rendobar-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendobar/apis/rendobar-api/revisions/e2df91eff7a2?raw)