Organization APIAPI Keys
List unified API keys
Lists the organization's API keys as metadata only — prefix, last four characters, type, scopes, and expiry. The secret itself is never returned after creation, so this is safe to script for key inventory and expiry auditing. Creating, rotating, and re-scoping keys is dashboard-only.
Authorization
personalAccessTokenAuth AuthorizationBearer <token>
Personal access token (prefixed gb_pat_). Acts on behalf of its owner and can never exceed the owner's own permissions. Send it as Authorization: Bearer <token>.
In: header
Path Parameters
organizationId*number
Response Body
application/json
curl -X GET "https://example.com/organization/0/api-keys"[ { "id": 0, "name": "string", "description": "string", "applicationIds": [ 0 ], "environmentIds": [ 0 ], "permissions": [ "string" ], "keyPrefix": "string", "lastFour": "string", "expiresAt": "2019-08-24T14:15:22Z", "lastUsedAt": "2019-08-24T14:15:22Z", "createdAt": "2019-08-24T14:15:22Z", "createdBy": { "id": "string", "email": "string" }, "deactivatedAt": "2019-08-24T14:15:22Z", "organizationId": 0, "type": "public", "allProjects": true }]