---
title: "List all API keys for the authenticated customer"
method: GET
path: "/v1/api-keys/"
tags: ["API Keys"]
---

# List all API keys for the authenticated customer

`GET /v1/api-keys/`

## Request

- Base URL: `https://api.platform.soax.com`
- URL: `https://api.platform.soax.com/v1/api-keys/`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/soax/apis/soax-api/docs/v1/api-keys/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieve all API keys belonging to your organization, including revoked ones. Key secrets are never returned — only metadata. Requires the `api-keys:read` scope.

## Response `200`

Successful Response

- ApiKeySummaryResponse[]
  - `id` string, required
  - `name` string, required
  - `scopes` string[], required
  - `package_ids` string[], nullable, required
  - `status` string, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `last_used_at` string, date-time, nullable, required

## Other responses

- `401`: Missing, invalid, or revoked API key.
- `403`: The API key does not carry the scope this endpoint requires.
- `429`: Rate limit exceeded (5 requests/second per API key, 500 requests/minute per IP). The response includes `Retry-After` (seconds), `RateLimit-Limit`, `RateLimit-Remaining`, and `RateLimit-Reset` (Unix time) headers — wait `Retry-After` seconds and retry.

---

[API](https://skmtc.dev/soax/apis/soax-api.md) - [All operations](https://skmtc.dev/soax/apis/soax-api/llms.txt) - [OpenAPI document](https://skmtc.dev/soax/apis/soax-api/revisions/2abdaa934277?raw)