Skip to content
Connect an agent

API keys

List API keys

List API keys.

GET/v1/api-keys

TL;DR

QuestionAnswer
What does it do?List API keys.
What does it need?An API key or an OAuth access token.
What does it take?Nothing.
What does it return?Status 200 with a body of type ApiKeyList.
In the SDK?flung.apiKeys.list()
What can go wrong?401 Missing, unknown, revoked or expired API key; 403 This key cannot manage API keys; 422 The request failed validation; 429 Too many requests for this credential; wait for retry-after seconds. Every failure has the same error shape.

Example

bash
curl -X GET 'https://api.flung.dev/v1/api-keys' \  --header "Authorization: Bearer $FLUNG_API_KEY"

A successful answer looks like this:

json
{  "data": [    {      "id": "key_aaaaaaaaaaaaaaaaaaaaaaaa",      "name": "string",      "prefix": "flung_sk_live_abcd",      "scopes": [        "string"      ],      "lastUsedAt": "2026-11-01T09:00:00.000Z",      "expiresAt": "2026-11-01T09:00:00.000Z",      "revokedAt": "2026-11-01T09:00:00.000Z",      "createdAt": "2026-11-01T09:00:00.000Z"    }  ]}

Responses

StatusMeaningBody
200Every key of the workspace, without secrets.ApiKeyList
401Missing, unknown, revoked or expired API key.Error
403This key cannot manage API keys.Error
422The request failed validation.Error
429Too many requests for this credential; wait for retry-after seconds.Error

Response body

A 200 answer has the type ApiKeyList.

FieldTypeRequiredDescription
dataApiKey[]yes
data[].idstringyes
data[].namestringyes
data[].prefixstringyesThe start of the key, to tell keys apart.
data[].scopesstring[]yes
data[].lastUsedAtstring | nullyes
data[].expiresAtstring | nullyes
data[].revokedAtstring | nullyes
data[].createdAtstringyes

See also

DocWhy
API referenceEvery endpoint
SchemasEvery request and response type
ErrorsEvery error code and what to do about it