---
title: "List API keys"
method: GET
path: "/api/keys"
tags: ["Account"]
---

# List API keys

`GET /api/keys`

## Request

- Base URL: `https://snaplab.dev`
- URL: `https://snaplab.dev/api/keys`
- Auth: HTTP bearer

Session-authenticated only — an API key cannot manage other keys. Also returns the account's signing secret for building signed URLs.

## Response `200`

Active keys.

- object
  - `items` ApiKey[]
    - `id` string
    - `name` string
    - `prefix` string
    - `createdAt` string, date-time
    - `lastUsedAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
  - `signingSecret` string: HMAC secret for signed URLs.

## Other responses

- `401`: Not authenticated.
- `403`: API keys can't manage other API keys.

---

[API](https://skmtc.dev/snaplab/apis/snaplab-api.md) · [All operations](https://skmtc.dev/snaplab/apis/snaplab-api/llms.txt) · [OpenAPI document](https://skmtc.dev/snaplab/apis/snaplab-api/revisions/4dbfbd8cd118?raw)