api.apiKeys.list

List API keys for the current org. Secrets are never included, just metadata. By default returns only active keys (not revoked, not expired). Pass { status: "all" } or { status: "revoked" } to widen the view.

const active = await api.apiKeys.list();
const everything = await api.apiKeys.list({ status: "all" });
const revoked = await api.apiKeys.list({ status: "revoked" });

Each row carries a can_revoke: boolean computed for the caller: owner/admin always true, everyone else true only for keys they minted themselves.

Arguments

Returns: Promise<ApiKey[]>.

REST endpoint: GET /auth/api-keys.