---
title: "List this Lucia account's API keys"
method: GET
path: "/v1/account/api-keys"
---

# List this Lucia account's API keys

`GET /v1/account/api-keys`

## Request

- Base URL: `https://api.roveapi.com`
- URL: `https://api.roveapi.com/v1/account/api-keys`
- Auth: API key in cookie `rove_session`

## Query parameters

- `include_revoked` boolean

## Response `200`

Successful response (Cache-Control: no-store)

- object
  - `keys` object[], required: Newest first, at most 200.
    - `id` string, uuid, required
    - `name` string, nullable, required
    - `environment` 'live' | 'test', required
    - `key_id_fingerprint` string, required: The viewer's API key ID: first 8 hex of SHA-256 of the key id.
    - `created_at` string, date-time, required
    - `last_used_at` string, date-time, nullable, required
    - `revoked_at` string, date-time, nullable, required
    - `kind` 'key' | 'oauth', required: 'oauth' for the dedicated key of a connected app's grant; such a key has no token and cannot be rotated.
    - `connected_app` object, nullable, required: null for every kind 'key' row.
      - `grant_id` string, uuid, required
      - `client_name` string, required: The app's display name: its asserted name, else its redirect host, else 'an app on this computer'. Not verified by Rove.
      - `grant_active` boolean, required
  - `truncated` boolean, required

## Other responses

- `400`: RFC 7807 invalid-params
- `401`: RFC 7807 owner-session-required: sign in
- `403`: RFC 7807 owner-origin-refused (mutations only)
- `429`: RFC 7807 rate-limit-exceeded: 120 reads per minute per account; Retry-After
- `503`: RFC 7807 account-service-unavailable; Retry-After: 30

---

[API](https://skmtc.dev/roveapi/apis/rove-api.md) · [All operations](https://skmtc.dev/roveapi/apis/rove-api/llms.txt) · [OpenAPI document](https://skmtc.dev/roveapi/apis/rove-api/revisions/0e5d69bde586?raw)