List API keys
⚠️
Preview — this feature is being built; the design below is the spec.
GET https://app.syntic.ai/v1/organizations/api_keysReturn the organization’s inference keys with prefix, hint, creator, restrictions and usage. Use the filters for hygiene jobs, such as finding keys unused for 90 days or every key a departing member created. Secrets are never returned, and keys are created only in the Console.
For how this fits into a full workflow, see API key management.
Headers
| Header | Required | Value |
|---|---|---|
Authorization | Yes | Bearer <admin key>: an Admin API key (sk_admin_...). Inference keys are refused with 403 admin_key_required. See Admin API keys. |
syntic-beta | Yes, while in preview | admin-2026-11-01. Without it the call fails with 400 beta_required. See Versioning. |
Query parameters
| Parameter | Type | Default | Description |
|---|---|---|---|
status | string | active | active, inactive, revoked, expired or all. |
workspace_id | string | Keys in one workspace. | |
created_by | string | Keys created by one member. | |
unused_since | RFC 3339 time | Keys last used before this time, or never. | |
limit | integer | 20 | 1 to 100. |
after_id | string | Next page: the previous page’s last_id. | |
before_id | string | Previous page: the previous page’s first_id. |
Response
200 OK, Content-Type: application/json
{
"data": [
{
"id": "apikey_01JB7C9E1G3J5L7N9Q1S",
"type": "api_key",
"name": "billing-worker-prod",
"kind": "private",
"prefix": "sk_live_3f9c",
"hint": "…a71e",
"status": "active",
"workspace_id": "wrkspc_01JC0A2C4E6G8J0L2N4Q",
"created_by": {
"id": "user_01J9Y0A2C4E6G8J0L2N4",
"email": "dana@example.com",
"status": "active"
},
"allowed_origins": [],
"allowed_ips": [
"203.0.113.0/24"
],
"pinned_version": "2026-11-01",
"expires_at": null,
"created_at": "2026-03-02T09:30:00Z",
"last_used_at": "2026-11-05T10:02:11Z",
"last_used_ip": "203.0.113.40",
"use_count": 1841220
}
],
"has_more": false,
"first_id": "apikey_01JB7C9E1G3J5L7N9Q1S",
"last_id": "apikey_01JB7C9E1G3J5L7N9Q1S"
}Examples
curl -sS "https://app.syntic.ai/v1/organizations/api_keys?unused_since=2026-08-07T00%3A00%3A00Z" \
-H "Authorization: Bearer $SYNTIC_ADMIN_KEY" \
-H "syntic-beta: admin-2026-11-01"Errors
Errors use the error envelope and carry a request_id. Codes specific to this operation:
| Status | type | code | When |
|---|---|---|---|
| 400 | invalid_request_error | beta_required | The syntic-beta header is missing. |
| 401 | authentication_error | invalid_api_key | The admin key is missing, unknown, revoked or expired. |
| 403 | permission_error | admin_key_required | An inference key was used. |
| 429 | rate_limit_error | rate_limited | Too many requests; wait for Retry-After. See Rate-limit headers. |
Was this page helpful?