List API Keys

GET

/org/:org_id/project/:project_id/api_key

GET

/api/v1/org/:org_id/project/:project_id/api_key

$ curl https://app.rightbrain.ai/api/v1/org/org_id/project/project_id/api_key \
>      -H "Authorization: Bearer <token>"

1 [
2   {
3     "name": "CI/CD Pipeline Key",
4     "id": "019f8a02-3c32-7001-ad3c-4c7e1f602021",
5     "key": "ory_at_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
6     "oauth_client_id": "019f8a01-2b21-7003-9c2b-3b6d0e5f1013",
7     "created": "2026-06-01T09:15:00.114203",
8     "expires_at": "2046-05-27T09:15:00.114203Z",
9     "revoked": false,
10     "last_used": "2026-07-25T11:42:03.881442Z"
11   },
12   {
13     "name": "Nightly Reporting Key",
14     "id": "019f8a02-3c32-7002-ad3c-4c7e1f602022",
15     "key": "ory_at_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
16     "oauth_client_id": "019f8a01-2b21-7003-9c2b-3b6d0e5f1013",
17     "created": "2026-06-10T07:00:00.442210",
18     "expires_at": "2046-06-05T07:00:00.442210Z",
19     "revoked": false
20   }
21 ]

List all active API keys for the current user in the specified project.

Note: This endpoint returns a plain array of API keys, not a paginated response. All API keys for the user are returned in a single request.

Returns all non-revoked API keys created by the authenticated user for the project. Keys are returned in descending order by creation date.

Response Fields:

id: Unique identifier for the API key
name: Human-readable name for the key
key: The API key value
oauth_client_id: The OAuth client this API key is associated with
expires_at: When the backing long-lived Hydra token expires
last_used: Timestamp of when the key was last used for authentication, if ever
created: When the key was created
revoked: Whether the key has been revoked

Security note: This endpoint returns the full, usable key value on every call, not just at creation time. Treat list responses as sensitive and avoid logging them.

List all active API keys for the current user in the specified project. **Note**: This endpoint returns a plain array of API keys, not a paginated response. All API keys for the user are returned in a single request. Returns all non-revoked API keys created by the authenticated user for the project. Keys are returned in descending order by creation date. **Response Fields:** - `id`: Unique identifier for the API key - `name`: Human-readable name for the key - `key`: The API key value - `oauth_client_id`: The OAuth client this API key is associated with - `expires_at`: When the backing long-lived Hydra token expires - `last_used`: Timestamp of when the key was last used for authentication, if ever - `created`: When the key was created - `revoked`: Whether the key has been revoked **Security note**: This endpoint returns the full, usable key value on every call, not just at creation time. Treat list responses as sensitive and avoid logging them.

Authentication

AuthorizationBearer

API key or access token, sent as Authorization: Bearer <token>. The simplest option: create an API key in your dashboard under Settings, then paste it here.

AuthorizationBearer

API key or access token, sent as Authorization: Bearer <token>. The simplest option: create an API key in your dashboard under Settings, then paste it here.

Path parameters

org_idstringRequiredformat: "uuid"

The unique identifier of the organization.

project_idstringRequiredformat: "uuid"

The unique identifier of the project.

Response

List of API keys

namestring

idstringformat: "uuid"

keystring

oauth_client_idstringformat: "uuid"

createddatetime

expires_atdatetime

revokedboolean

last_useddatetime or nullOptional

Errors

400

Bad Request Error

403

Forbidden Error

422

Unprocessable Entity Error