List API keys
List API key metadata without returning any complete key value.
Endpoint
GET
/api/v1/workspaces/{workspace_id}/api-keysAuthentication
| Operation class | Authentication | Minimum role | API key |
|---|---|---|---|
| customer-api | Bearer API key or dashboard session cookie; dashboard mutations also require X-CX-Request: 1. | admin | Allowed |
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
workspace_id | path | string | Yes | — |
Request body
This operation has no request body.
Example
curl --request GET 'https://operade.ai/api/v1/workspaces/ws_demo/api-keys' \ --header 'Authorization: Bearer YOUR_API_KEY'
Responses
| Status | Description | Content |
|---|---|---|
4XX | Handled client error | application/json: ErrorResponse |
200 | Successful Response | application/json: ApiKeyListResponse |
4XX application/json response schema
| Field path | Type | Reference | Format | Nullable | Required | Enum | Description |
|---|---|---|---|---|---|---|---|
$ | object | ErrorResponse | — | No | Yes | — | — |
error | object | ErrorItem | — | No | Yes | — | — |
error.code | string | — | — | No | Yes | — | — |
error.details | object | — | — | No | No | — | — |
error.message | string | — | — | No | Yes | — | — |
200 application/json response schema
| Field path | Type | Reference | Format | Nullable | Required | Enum | Description |
|---|---|---|---|---|---|---|---|
$ | object | ApiKeyListResponse | — | No | Yes | — | — |
items | array<ApiKeyItem> | — | — | No | Yes | — | — |
items[] | object | ApiKeyItem | — | No | Yes | — | — |
items[].created_at | string | — | date-time | No | Yes | — | — |
items[].id | string | — | — | No | Yes | — | — |
items[].last_used_at | string or null | — | date-time | Yes | Yes | — | — |
items[].name | string | — | — | No | Yes | — | — |
items[].prefix | string | — | — | No | Yes | — | — |
items[].revoked_at | string or null | — | date-time | Yes | Yes | — | — |
Response example
{
"items": []
}Errors
Reviewed common and route-declared errors are summarized here; the list is not exhaustive. Start with the distributed error index to find each code's canonical domain page.
| Status | Code | Description |
|---|---|---|
401 | unauthenticated | Authentication is missing, invalid, or revoked. |
403 | forbidden | The authenticated caller does not have access to this operation. |
404 | not_found | The requested workspace resource was not found. |