# List API keys

List API key metadata without returning any complete key value.

## Endpoint

`GET /api/v1/workspaces/{workspace_id}/api-keys`

## Authentication

| Class | Authentication | Minimum role | API key |
| --- | --- | --- | --- |
| customer-api | Bearer API key or dashboard session cookie; dashboard mutations also require X-CX-Request: 1. | admin | Allowed |

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `workspace_id` | path | `string` | Yes | — |

## Request body

This operation has no request body.

## Example

```bash
curl --request GET 'https://operade.ai/api/v1/workspaces/ws_demo/api-keys' \
  --header 'Authorization: Bearer YOUR_API_KEY'
```

## Responses

| Status | Description | Content |
| --- | --- | --- |
| 4XX | Handled client error | application/json: `ErrorResponse` |
| 200 | Successful Response | application/json: `ApiKeyListResponse` |

### 4XX application/json response schema

| Field path | Type | Reference | Format | Nullable | Required | Enum | Description |
| --- | --- | --- | --- | --- | --- | --- | --- |
| `$` | `object` | ErrorResponse | — | No | Yes | — | — |
| `error` | `object` | ErrorItem | — | No | Yes | — | — |
| `error.code` | `string` | — | — | No | Yes | — | — |
| `error.details` | `object` | — | — | No | No | — | — |
| `error.message` | `string` | — | — | No | Yes | — | — |

### 200 application/json response schema

| Field path | Type | Reference | Format | Nullable | Required | Enum | Description |
| --- | --- | --- | --- | --- | --- | --- | --- |
| `$` | `object` | ApiKeyListResponse | — | No | Yes | — | — |
| `items` | `array<ApiKeyItem>` | — | — | No | Yes | — | — |
| `items[]` | `object` | ApiKeyItem | — | No | Yes | — | — |
| `items[].created_at` | `string` | — | date-time | No | Yes | — | — |
| `items[].id` | `string` | — | — | No | Yes | — | — |
| `items[].last_used_at` | `string or null` | — | date-time | Yes | Yes | — | — |
| `items[].name` | `string` | — | — | No | Yes | — | — |
| `items[].prefix` | `string` | — | — | No | Yes | — | — |
| `items[].revoked_at` | `string or null` | — | date-time | Yes | Yes | — | — |

### Response example

```json
{
  "items": []
}
```

## Errors

Reviewed common and route-declared errors are summarized here; the list is not exhaustive. Start with the [distributed error index](/docs/reference/api/errors) to find each code's canonical domain page.

| Status | Code | Description |
| --- | --- | --- |
| 401 | `unauthenticated` | Authentication is missing, invalid, or revoked. |
| 403 | `forbidden` | The authenticated caller does not have access to this operation. |
| 404 | `not_found` | The requested workspace resource was not found. |

## Related operations

- [Create an API key](/docs/api-reference/api-keys/create-api-key) — `POST /api/v1/workspaces/{workspace_id}/api-keys`
- [Revoke an API key](/docs/api-reference/api-keys/revoke-api-key) — `DELETE /api/v1/workspaces/{workspace_id}/api-keys/{key_id}`