Skip to main content
GET
/
v1
/
apikeys
List API keys for the tenant
curl --request GET \
  --url https://api.trulayer.ai/v1/apikeys \
  --header 'Authorization: Bearer <token>'
[
  {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "prefix": "<string>",
    "name": "<string>",
    "created_at": "2023-11-07T05:31:56Z",
    "last_used_at": "2023-11-07T05:31:56Z",
    "revoked_at": "2023-11-07T05:31:56Z",
    "created_by_user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "created_by_email": "<string>",
    "created_by_first_name": "<string>",
    "created_by_last_name": "<string>",
    "scopes": [
      "<string>"
    ]
  }
]

Authorizations

​
Authorization
string
header
required

SDK API key (tl_...) or Clerk session JWT

Response

Key list

​
id
string<uuid>
required
​
prefix
string
required
​
name
string
required
​
created_at
string<date-time>
required
​
last_used_at
string<date-time> | null
​
revoked_at
string<date-time> | null
​
created_by_user_id
string<uuid> | null

Local user ID of the dashboard user who created the key (TRU-207). null for keys created before the column was introduced, keys created by API-key auth (SDK-created keys carry no user identity), or keys whose creator was subsequently deleted — the FK is ON DELETE SET NULL.

​
created_by_email
string | null
​
created_by_first_name
string | null
​
created_by_last_name
string | null
​
scopes
string[] | null

API-key scope allowlist (TRU-180). An empty or omitted array grants legacy full access; any non-empty set restricts the key to the listed scopes (e.g. ["query"] for read-only MCP keys).