# List API keys

List API keys for the authenticated user.

Source: https://statusdashboard.com/docs/api/account-management/api-keys/list

`GET /app/api-keys`

Returns metadata for all API keys belonging to the authenticated user. Each user only sees their own keys — this endpoint does not return keys belonging to other org members. The raw key secret is never returned after creation.

***

## Request
See [API Basics](/docs/api) for required headers.

This endpoint takes no request body or query parameters.

***

## Sample request
```bash
curl https://api.statusdashboard.com/app/api-keys \
  -H "Authorization: Bearer bcf847abf5c6:def456"
```

## Sample response
**Status: `200 OK`**

```json
{
  "keys": [
    {
      "keyId": "bcf847abf5c6",
      "email": "alice@acmeplumbing.com",
      "userId": "f47ac10b-58cc-4372-a567-0e02b2c3d481",
      "name": "Production integration",
      "createdAt": "2026-03-10T08:00:00.000Z",
      "lastUsedAt": "2026-04-14T17:32:00.000Z"
    }
  ]
}
```

`lastUsedAt` is omitted when the key has never been used.

***

## Response fields
| Field               | Type              | Description                                                                                                                                 |
| ------------------- | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| `keys`              | array             | API key metadata for the authenticated user. The raw secret is never returned after [create](/docs/api/account-management/api-keys/create). |
| `keys[].keyId`      | string            | Public key identifier used in the `Authorization` header.                                                                                   |
| `keys[].email`      | string            | Email of the key owner (always the authenticated user).                                                                                     |
| `keys[].userId`     | string            | Internal user UUID.                                                                                                                         |
| `keys[].name`       | string            | Human-readable label from create, or the default date-stamped name.                                                                         |
| `keys[].createdAt`  | string            | ISO 8601 timestamp when the key was created.                                                                                                |
| `keys[].lastUsedAt` | string \| omitted | ISO 8601 timestamp of the most recent successful API call. Omitted when never used.                                                         |

***

## Error responses
| Status | When                                                        |
| ------ | ----------------------------------------------------------- |
| `403`  | The API access feature is not enabled for the organization. |