---
title: "List API keys"
method: GET
path: "/v1/api-keys"
tags: ["API keys"]
---

# List API keys

`GET /v1/api-keys`

## Request

- Base URL: `https://api.rumoro.dev`
- URL: `https://api.rumoro.dev/v1/api-keys`
- Auth: HTTP bearer

Lists the workspace's active keys, latest first, with name, prefix, scope, expiry and last use. Revoked keys and secrets are never listed.

## Response `200`

All keys, latest first, without the secret

- object
  - `data` object[], required
    - `id` string, required: The key's id (key_...).
    - `name` string, required
    - `prefix` string, required: The start of the key, so you can tell keys apart.
    - `scope` 'read' | 'write', required: write can do everything. read is limited to GET.
    - `createdAt` string, required: UTC time in ISO 8601.
    - `lastUsedAt` string, nullable, required: UTC time in ISO 8601.
    - `expiresAt` string, nullable, required: When the key expires. Null for a key without expiry. Expired keys stay in the list until revoked.

## Other responses

- `401`: The API key is missing or not valid

---

[API](https://skmtc.dev/rumoro/apis/rumoro-api.md) · [All operations](https://skmtc.dev/rumoro/apis/rumoro-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rumoro/apis/rumoro-api/revisions/9ef63ea894d1?raw)