API Keys
List API keys
List API keys for the authenticated user.
GET /app/api-keys
Returns metadata for all API keys belonging to the authenticated user. Each user only sees their own keys — this endpoint does not return keys belonging to other org members. The raw key secret is never returned after creation.
Request
See API Basics for required headers.
This endpoint takes no request body or query parameters.
Sample request
curl https://api.statusdashboard.com/app/api-keys \
-H "Authorization: Bearer bcf847abf5c6:def456"Sample response
Status: 200 OK
{
"keys": [
{
"keyId": "bcf847abf5c6",
"email": "alice@acmeplumbing.com",
"userId": "f47ac10b-58cc-4372-a567-0e02b2c3d481",
"name": "Production integration",
"createdAt": "2026-03-10T08:00:00.000Z",
"lastUsedAt": "2026-04-14T17:32:00.000Z"
}
]
}lastUsedAt is omitted when the key has never been used.
Response fields
| Field | Type | Description |
|---|---|---|
keys | array | API key metadata for the authenticated user. The raw secret is never returned after create. |
keys[].keyId | string | Public key identifier used in the Authorization header. |
keys[].email | string | Email of the key owner (always the authenticated user). |
keys[].userId | string | Internal user UUID. |
keys[].name | string | Human-readable label from create, or the default date-stamped name. |
keys[].createdAt | string | ISO 8601 timestamp when the key was created. |
keys[].lastUsedAt | string | omitted | ISO 8601 timestamp of the most recent successful API call. Omitted when never used. |
Error responses
| Status | When |
|---|---|
403 | The API access feature is not enabled for the organization. |

