> ## Documentation Index
> Fetch the complete documentation index at: https://docs.microsandbox.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# List API keys

> Admins and owners see all keys. Members see only their own keys.



## OpenAPI

````yaml /api-reference/openapi.personal.json get /v1/orgs/{slug}/api-keys
openapi: 3.1.0
info:
  title: Personal token API
  description: User-scoped API for account and organization management.
  version: 0.1.0
servers:
  - url: https://api.microsandbox.dev
security:
  - bearer: []
paths:
  /v1/orgs/{slug}/api-keys:
    get:
      tags:
        - Credentials
      summary: List API keys
      description: Admins and owners see all keys. Members see only their own keys.
      operationId: list_api_keys
      parameters:
        - name: slug
          in: path
          description: Organization slug
          required: true
          schema:
            type: string
        - name: cursor
          in: query
          description: Pagination cursor
          required: false
          schema:
            type: string
        - name: limit
          in: query
          description: Page size (default 20, max 100)
          required: false
          schema:
            type: integer
            format: int64
      responses:
        '200':
          description: Paginated list of API keys
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedApiKeyResponse'
        '401':
          description: Unauthorized
        '403':
          description: Insufficient permissions
      security:
        - bearer: []
components:
  schemas:
    PaginatedApiKeyResponse:
      type: object
      description: >-
        Paginated list of API keys (OpenAPI schema for
        `PaginatedResponse<ApiKeyResponse>`).
      required:
        - data
        - has_more
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/ApiKeyResponse'
        has_more:
          type: boolean
        next_cursor:
          type:
            - string
            - 'null'
    ApiKeyResponse:
      type: object
      description: >-
        API key metadata returned in list responses. Never includes the raw key
        or hashes.
      required:
        - id
        - name
        - created_at
      properties:
        created_at:
          type: string
          format: date-time
        expires_at:
          type:
            - string
            - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        name:
          type: string
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
      description: >-
        Personal access token (msb_pat_…) or session JWT - the credential an
        agent acts with on a user's behalf.

````