---
title: "List your organization's MCP API keys."
method: GET
path: "/internal/api/mcp/keys"
tags: ["MCP CONNECTOR"]
---

# List your organization's MCP API keys.

`GET /internal/api/mcp/keys`

## Request

- Base URL: `https://api.signalshq.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.signalshq.io/internal/api/mcp/keys`
- Auth: OAuth 2
  - Password
  - Token URL: `/auth/login`

Secrets are never included here — only the masked form.

Reading a key back is a separate, audited call on a single key, so
that listing cannot become a bulk credential export.

``include_revoked`` exists for audit: a withdrawn key is kept so a
reviewer can answer which credential was used and when access was
removed.

## Query parameters

- `include_revoked` boolean

## Response `200`

Successful Response

- ApiKeyListResponse
  - `keys` ApiKeySummary[]
    - `id` string, uuid, required
    - `key_id` string, required: Public half of the credential. Appears in server logs, so it is how you match a suspicious call back to one key.
    - `label` string, required
    - `created_at` string, date-time, required
    - `last_used_at` string, date-time, nullable
    - `expires_at` string, date-time, nullable
    - `revoked_at` string, date-time, nullable
    - `masked_key` string: ``elan_<key_id>_***`` — render this in the key list. Safe anywhere; the secret half is not in it.
    - `revealable` boolean: Whether the Owner can read this key back. False for keys minted before the reveal feature (no stored secret) and for revoked keys. Drive the reveal button off this rather than letting the user discover it by clicking.
    - `last_revealed_at` string, date-time, nullable
    - `revealed_by` string, nullable
    - `reveal_count` integer

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/signalshq/apis/signals-api.md) - [All operations](https://skmtc.dev/signalshq/apis/signals-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signalshq/apis/signals-api/revisions/2c22af3b5576?raw)