List API keys
Every API key in a workspace. Tokens never appear here: the raw value shows once at creation and once on rotation.
state, the scopes in spec.permissions, and never a token. If you need a key’s raw value again, rotate it.
The global key is not in this list
Every key here belongs to exactly one workspace. The system-managed global key spans all workspaces, so it lives on the account instead: get the global API key.What a row tells you
spec.token is absent on every read. It appears exactly twice in a key’s life: in the create response and in the rotate response.
Filtering
prefix, query, labels, and sortOrder work the same way they do on every list endpoint: prefix matches the ID, query is free-form search, labels takes comma-separated key=value pairs with AND semantics, and limit sets a page size the SDK iterator pages past on its own.
Related
Create an API key
API key scopes
Disable an API key
Get the global API key
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The workspace whose API keys will be listed (path).
"workspace_01HXKD2E5NQM3T9AYWCF133E3Q"
Query Parameters
Maximum number of results to return.
Pagination cursor from previous response.
Filter by ID prefix.
Free-form search query.
Filters by metadata labels. Comma-separated key=value pairs, e.g. "env=prod,team=ai". A resource matches only if every pair matches exactly (AND semantics).
Sort order for results (asc or desc by creation time).
When true, included info fields are populated. Requests with this flag count more against your rate limit.