---
title: "List the workspace's API keys"
description: Session or workspace bearer.
api_method: GET
api_path: "/v1/workspaces/{workspaceId}/api-keys"
canonical_url: https://wiblo.app/docs/developers/api/api-keys/list-workspace-api-keys
last_updated: 2026-07-28T17:31:44+02:00
md_url: https://wiblo.app/docs/developers/api/api-keys/list-workspace-api-keys.md
---

# List the workspace's API keys

`GET /v1/workspaces/{workspaceId}/api-keys`

Session or workspace bearer. Owners/admins see every key in the workspace; member-role callers see only keys they created. The `integration_name` (machine member) is a column. Cross-workspace probes collapse onto `WORKSPACE_NOT_FOUND`. Per-user rate-limited at 60/60s.

## Path parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `workspaceId` | `string` | Yes |  |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/workspaces/{workspaceId}/api-keys \
  -H "Authorization: Bearer $WIBLO_TOKEN"
```

**TypeScript**

```ts
import { createSdk, listWorkspaceApiKeys } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await listWorkspaceApiKeys({
  client: sdk,
  path: { workspaceId: "..." },
})
```

## Responses

**`200`** — The workspace's visible API keys. Returns `ApiKeyListResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `data` | `array<ApiKeySummary>` | Yes |  |

**`401`** — No valid session cookie or `wbl_*` bearer was present. Returns `ApiErrorEnvelope`.

**`404`** — Caller has no active membership in the workspace, or it does not exist (`WORKSPACE_NOT_FOUND`). Returns `ApiErrorEnvelope`.

**`422`** — Path param failed UUID validation (`INVALID_PARAMS`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.

### The ApiKeySummary object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes |  |
| `member_id` | `string` | Yes |  |
| `integration_name` | `string` | Yes |  |
| `role_cap` | `"admin" \| "member"` | Yes |  |
| `kind` | `"live" \| "ephemeral"` | Yes |  |
| `key_prefix` | `string` | Yes |  |
| `expires_at` | `string \| null` | Yes |  |
| `last_used_at` | `string \| null` | Yes |  |
| `last_used_ip_hash` | `string \| null` | Yes |  |
| `revoked_at` | `string \| null` | Yes |  |
| `revoke_reason` | `string \| null` | Yes |  |
| `created_by_user_id` | `string \| null` | Yes |  |
| `created_by_member_id` | `string \| null` | Yes |  |
| `created_by_name` | `string \| null` | Yes |  |
| `created_by_avatar_url` | `string \| null` | Yes |  |
| `agent_run_id` | `string \| null` | Yes |  |
| `created_at` | `string` | Yes |  |
| `status` | `"active" \| "expired" \| "revoked"` | Yes |  |