---
title: "List API keys"
method: GET
path: "/api/v1/keys"
tags: ["Keys"]
---

# List API keys

`GET /api/v1/keys`

## Request

- Base URL: `https://api.uptimemonitoring.com`
- URL: `https://api.uptimemonitoring.com/api/v1/keys`
- Auth: HTTP bearer

Returns all API keys for the authenticated account, ordered by creation
date (newest first). Key hashes and plaintexts are never exposed.

## Response `200`

List of API keys.

- APIKey[]
  - `id` integer
  - `account_id` integer
  - `key_prefix` string: Prefix for identification: `umk_live_` + first 8 hex chars.
  - `label` string, nullable: User-assigned label. New labels (created on or after the #115 tightening) are trimmed to 3..100 characters. Legacy labels persisted before that rule may fall outside this range or carry untrimmed surrounding whitespace and are returned verbatim.
  - `revoked_at` string, date-time, nullable: If set, the key will stop working after this timestamp.
  - `last_used_at` string, date-time, nullable
  - `last_used_ip` string, nullable: IP address of the last request authenticated with this key.
  - `created_at` string, date-time

## Other responses

- `401`: Missing or invalid credentials.
- `403`: Account is currently suspended. On `POST /api/v1/monitors`, and on a `PUT /api/v1/monitors/{monitorID}` that changes `url` or `type` (issue #335), this can also be returned by the per-account port-scan heuristic when the triggering request crossed the port-fan threshold inside the sliding window (10 minutes by default; `SCAN_WINDOW`). A host-fan trip does NOT suspend the account — see the 429 response instead.
- `429`: Per-account dispatcher rate limit exceeded (200 requests/minute). The `Retry-After` header gives the integer seconds until at least one token has refilled. The `X-RateLimit-*` trio reflects the bucket whose rejection produced this response — usually the global 200/min cap; on `POST /api/v1/monitors` a 429 may instead reflect the per-route 20/min creation limit.

---

[API](https://skmtc.dev/uptimemonitoring/apis/uptimemonitoring-com-api.md) · [All operations](https://skmtc.dev/uptimemonitoring/apis/uptimemonitoring-com-api/llms.txt) · [OpenAPI document](https://skmtc.dev/uptimemonitoring/apis/uptimemonitoring-com-api/revisions/ddcb2a8bc70f?raw)