List API keys

⚠️
Preview — this feature is being built; the design below is the spec.
GET https://app.syntic.ai/v1/organizations/api_keys

Return the organization’s inference keys with prefix, hint, creator, restrictions and usage. Use the filters for hygiene jobs, such as finding keys unused for 90 days or every key a departing member created. Secrets are never returned, and keys are created only in the Console.

For how this fits into a full workflow, see API key management.

Headers

HeaderRequiredValue
AuthorizationYesBearer <admin key>: an Admin API key (sk_admin_...). Inference keys are refused with 403 admin_key_required. See Admin API keys.
syntic-betaYes, while in previewadmin-2026-11-01. Without it the call fails with 400 beta_required. See Versioning.

Query parameters

ParameterTypeDefaultDescription
statusstringactiveactive, inactive, revoked, expired or all.
workspace_idstringKeys in one workspace.
created_bystringKeys created by one member.
unused_sinceRFC 3339 timeKeys last used before this time, or never.
limitinteger201 to 100.
after_idstringNext page: the previous page’s last_id.
before_idstringPrevious page: the previous page’s first_id.

Response

200 OK, Content-Type: application/json

{
  "data": [
    {
      "id": "apikey_01JB7C9E1G3J5L7N9Q1S",
      "type": "api_key",
      "name": "billing-worker-prod",
      "kind": "private",
      "prefix": "sk_live_3f9c",
      "hint": "…a71e",
      "status": "active",
      "workspace_id": "wrkspc_01JC0A2C4E6G8J0L2N4Q",
      "created_by": {
        "id": "user_01J9Y0A2C4E6G8J0L2N4",
        "email": "dana@example.com",
        "status": "active"
      },
      "allowed_origins": [],
      "allowed_ips": [
        "203.0.113.0/24"
      ],
      "pinned_version": "2026-11-01",
      "expires_at": null,
      "created_at": "2026-03-02T09:30:00Z",
      "last_used_at": "2026-11-05T10:02:11Z",
      "last_used_ip": "203.0.113.40",
      "use_count": 1841220
    }
  ],
  "has_more": false,
  "first_id": "apikey_01JB7C9E1G3J5L7N9Q1S",
  "last_id": "apikey_01JB7C9E1G3J5L7N9Q1S"
}

Examples

curl -sS "https://app.syntic.ai/v1/organizations/api_keys?unused_since=2026-08-07T00%3A00%3A00Z" \
  -H "Authorization: Bearer $SYNTIC_ADMIN_KEY" \
  -H "syntic-beta: admin-2026-11-01"

Errors

Errors use the error envelope and carry a request_id. Codes specific to this operation:

StatustypecodeWhen
400invalid_request_errorbeta_requiredThe syntic-beta header is missing.
401authentication_errorinvalid_api_keyThe admin key is missing, unknown, revoked or expired.
403permission_erroradmin_key_requiredAn inference key was used.
429rate_limit_errorrate_limitedToo many requests; wait for Retry-After. See Rate-limit headers.
Was this page helpful?