List keys

Returns the API keys the caller may see, newest first: their own, or every key the org holds when the caller administers it.

GET /v1/account/keys

Account → · All API references → · Get started →

Address	`https://api.hanzo.ai/v1/account/keys`
Method	`GET`
Operation	`get_account_keys`
Auth	`Authorization: Bearer $HANZO_API_KEY`

Returns the API keys the caller may see, newest first: their own, or every key the org holds when the caller administers it. Each is its own credential with its own name, prefix, status, expiry and limit. Revoked keys stay listed. No secret material comes back; a publishable key, which is public by construction, carries its full value.

Request

GET /v1/account/keys takes no parameters and no body — the credential is the whole request.

Response

Status	Body	Meaning
`200`	account.apiKeyList	ok
`default`	problem-details	refused

200 body — 21 fields.

Field	In	Type	Always	Description
`keys`	body	account.apiKey[]	—	Keys is every key the caller may see, newest first: their own, or every key of the org when the caller administers it.
`keys[].budget`	body	account.keyBudget	—
`keys[].budget.month`	body	integer (int64)	—	Month is per calendar month, UTC.
`keys[].budget.total`	body	integer (int64)	—	Total is over the key's whole life.
`keys[].created`	body	string	—	Created is when the key was minted (RFC 3339).
`keys[].creator`	body	string	—	Creator is the person the key speaks for, `<org>/<user>`: who created it.
`keys[].expires`	body	string	—	Expires is when the key stops working (RFC 3339).
`keys[].id`	body	string	—	ID addresses this key in PATCH and DELETE /v1/account/keys/{id}.
`keys[].key`	body	string	—	Key is the full credential.
`keys[].limit`	body	string[]	—	Limit is what this key may reach, as `kind:name` entries — `model:zen5`, `project:acme`, `product:train` (read and write), `read:billing` (read only), `read:*` (a read-only key).
`keys[].name`	body	string	—	Name is the key's label, chosen by the person who made it.
`keys[].prefix`	body	string	—	Prefix is the head of the credential this key's holder presents — the sk- of a secret key — enough to tell which string a row is, never enough to use.
`keys[].rate`	body	integer (int64)	—	Rate is how many requests a minute the key may make.
`keys[].revoked`	body	string	—
`keys[].revoker`	body	string	—	Revoker is who revoked the key, `<org>/<user>`, and Revoked when.
`keys[].spend`	body	account.keyBudget	—
`keys[].spend.month`	body	integer (int64)	—	Month is per calendar month, UTC.
`keys[].spend.total`	body	integer (int64)	—	Total is over the key's whole life.
`keys[].status`	body	string	—	Status is active, expired, revoked, or disabled (switched off in IAM).
`keys[].type`	body	string	—	Type is the key class: secret (sk-) or publishable (pk-).
`keys[].used`	body	string	—	Used is when the key was last used (RFC 3339).

Failure carries the platform error shape — see Errors.

Examples

CLI

SDK

HTTP

MCP

hanzo account keys get

.ts

.py

.go

.rs

.java

import { Configuration, AccountApi } from 'hanzoai';

const api = new AccountApi(new Configuration({ accessToken: process.env.HANZO_API_KEY }));
const { data } = await api.getAccountKeys();

from hanzoai.cloud import ApiClient, Configuration
from hanzoai.cloud.api import AccountApi

client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"]))
result = AccountApi(client).get_account_keys()

cfg := hanzoai.NewConfiguration()
cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY"))
client := hanzoai.NewAPIClient(cfg)

resp, _, err := client.AccountAPI.GetAccountKeys(context.Background()).Execute()
if err != nil {
	return err
}

use hanzo_client::apis::{configuration::Configuration, account_api};

let mut cfg = Configuration::new();
cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok();

let result = account_api::get_account_keys(&cfg, Default::default()).await?;

import ai.hanzo.cloud.ApiClient;
import ai.hanzo.cloud.api.AccountApi;

ApiClient client = new ApiClient();
client.setBearerToken(System.getenv("HANZO_API_KEY"));

var result = new AccountApi(client).getAccountKeys();

curl https://api.hanzo.ai/v1/account/keys \
  -H "Authorization: Bearer $HANZO_API_KEY"

MCP reaches account through the account tool, which names its 6 operations with its own verbs — this one among them, under a name only MCP declares. describe explains any of them:

curl -X POST https://api.hanzo.ai/v1/mcp \
  -H "Content-Type: application/json" \
  -d '{
       "jsonrpc": "2.0",
       "id": 1,
       "method": "tools/call",
       "params": {
         "name": "describe",
         "arguments": {
           "op": "get_account_appearance"
         }
       }
     }'

Account API · All Hanzo APIs · Interactive reference

Was this page useful?

PreviousList embed NextUpdate keys