Skip to main content
GET
List API keys for the authenticated user

Authorizations

Authorization
string
header
required

Supabase Auth access token passed as Bearer token

Response

API keys for the authenticated user

id
string<uuid>
required
prefix
string
required

Stored display prefix; the plaintext key is never returned.

Example:

"ns_live_a1b2"

is_active
boolean
required
name
string | null
created_at
string<date-time> | null
last_used_at
string<date-time> | null

Wall-clock time the key was last seen on an authenticated request, updated best-effort by the auth middleware. Always present (nullable) so clients can distinguish "never used" from "field absent".

scope
string | null

Advisory free-text scope label (T08 Phase 10); not enforced server-side.

expires_at
string<date-time> | null

Effective expiration time for a key scheduled for rotation retirement.

revoked_at
string<date-time> | null
rotation_parent_key_id
string<uuid> | null

Original key id when this key was minted by a rotation.