---
title: "List this account's API keys"
method: GET
path: "/user/api-keys"
---

# List this account's API keys

`GET /user/api-keys`

## Request

- Base URL: `https://rendry.io/api/v1`
- URL: `https://rendry.io/api/v1/user/api-keys`
- Auth: HTTP bearer

For the signed-in owner, in a browser session. An API key cannot list, issue or revoke keys: it is refused with 401. A connector (MCP/OAuth) token is refused on every account-management door with 403 `browser_session_required`: a connector does MCP work, it does not manage keys. Each key is listed with its scope; the key itself is shown only as its first 12 characters. The resolved account may be selected with X-Rendry-Account; only an owner or admin browser session may administer its keys. The mode and actor are reported in each reply.

## Headers

- `X-End-User` string
- `X-Rendry-Account` string

## Response `200`

Array of APIKey

- APIKey[]
  - `id` string
  - `name` string
  - `key_value` string: The whole key (sk_live_... or sk_test_...) in the create response, and ONLY there — it is not stored. The list shows the first 12 characters followed by ***.
  - `scope` 'read' | 'render' | 'full': What the key may do. read: list and read templates, presets, documents, usage, and price a batch (POST /batch-tasks/preview parses the table and quotes the run, rendering and charging nothing) — no rendering, no changes. render: everything read may, plus render_image, render_batch, render_document and preview_preset (they spend credits) — no template edits or deletions. full: everything, including creating, editing, sharing and deleting templates and files.
  - `created_at` string
  - `mode` 'live' | 'test'
  - `actor_id` string
  - `issued_by_actor_id` string

## Other responses

- `401`: Not signed in, or an API key was used
- `403`: `error` is `browser_session_required`: a connector (MCP/OAuth) token was used

---

[API](https://skmtc.dev/rendry/apis/rendry-api.md) · [All operations](https://skmtc.dev/rendry/apis/rendry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendry/apis/rendry-api/revisions/c4fb572c26c9?raw)