GET /v1/api-keys
GET
/v1/api-keysAuthorization
AuthorizationBearer token · headerrequiredQuery parameters
limitinteger<int64>min 1 · max 200
afterstring<uuid>orderOrderParamNewest first when omitted.
Allowed:
ascdescHeader parameters
Kikuvi-Workspacestring<uuid>requiredWorkspace to list from
Responses
200One page, newest first unless order=asc. A revoked key still appears, with its revoked_at set.
itemsApiKeyBody[]requiredShow propertiesHide properties
Array of
ApiKeyBodycreated_atstring<date-time>requiredcreated_byActorBodyrequiredWho did something, resolved for display. `users` rows are never deleted, so
this renders after a membership ends.
Show propertiesHide properties
display_namestring | nullrequiredprimary_emailstring | nullrequireduser_idstring<uuid>requiredexpires_atstring<date-time> | nullrequiredidstring<uuid>requiredlabelstringrequiredlast_used_atstring<date-time> | nullrequiredpermissionsKeyPermissionSchema[]requiredprefixstringrequiredNon-secret display prefix: the key's marker, its environment, and
eight characters of the secret.
revoked_atstring<date-time> | nullrequirednext_cursorstring<uuid> | nullrequired`None` on the last page.
400Bad limit, cursor, or order, a malformed workspace header, or no workspace header.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired401Missing, malformed, or invalid bearer token.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired404No such workspace, or the caller cannot see it.
errorErrorDetailrequiredShow propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired