---
title: "List Api Keys"
method: GET
path: "/v1/orgs/{org_id}/api-keys"
tags: ["api-keys"]
---

# List Api Keys

`GET /v1/orgs/{org_id}/api-keys`

## Request

- Base URL: `https://api.sonenta.dev`
- URL: `https://api.sonenta.dev/v1/orgs/{org_id}/api-keys`
- Auth: none declared

Admins/owners see every key in the org; a MEMBER sees only their own.

Opening this to members is not a convenience: they can now mint keys, and a
credential its holder can neither inspect nor revoke is a security problem.
The filter is on `created_by_uuid`, so no member ever sees another's key.

## Path parameters

- `org_id` string, required

## Response `200`

Successful Response

- ApiKeyListOut
  - `items` ApiKeyOut[], required
    - `uuid` string, required
    - `prefix` string, required
    - `last4` string, required
    - `name` string, required
    - `scopes` string[], required
    - `projects` string[]
    - `org_wide` boolean
    - `version_uuid` string, nullable
    - `env_type` 'prod' | 'dev'
    - `ip_allowlist` string[]
    - `origin_allowlist` string[]
    - `created_by_uuid` string, nullable, required
    - `created_at` string, date-time, required
    - `expires_at` string, date-time, nullable, required
    - `revoked_at` string, date-time, nullable, required
    - `last_used_at` string, date-time, nullable, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/sonenta/apis/sonenta-api.md) · [All operations](https://skmtc.dev/sonenta/apis/sonenta-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sonenta/apis/sonenta-api/revisions/f853ea49fb05?raw)