Skip to Content
SeyloDocs
API referenceAPI keys

List API keys

GET
/api/v1/apiKeys.list

Lists the signed-in person's API keys and MCP tokens, newest first. Owners and admins can pass all=true to see everyone's keys.

Any signed-in caller. Not available to MCP clients or the assistant.

Authorization

cookieseylo_session<token>

Query Parameters

kind?string|string
all*boolean
Defaultfalse
includeRevoked*boolean
Defaultfalse

Response Body

Success.

application/json
  1. response
keys*array<>
Example Request
curl -X GET 'https://example.com/api/v1/apiKeys.list?all=false&includeRevoked=false'
Example Response
{  "keys": [    {      "id": "string",      "kind": "api",      "name": "string",      "prefix": "string",      "actions": [        "string"      ],      "projectIds": [        "string"      ],      "readOnly": true,      "mcpClient": "string",      "owner": {        "id": "string",        "email": "string"      },      "expiresAt": "2019-08-24T14:15:22Z",      "lastUsedAt": "2019-08-24T14:15:22Z",      "revokedAt": "2019-08-24T14:15:22Z",      "createdAt": "2019-08-24T14:15:22Z"    }  ]}

Create an API key POST

Creates an API key or MCP token for the signed-in person, limited to the given actions ("*" for all of yours), optionally to some projects, read-only or not, with an optional expiry. The token is returned once. Browser sessions only, signed in or confirmed with auth.reauth in the last 15 minutes (FORBIDDEN details.reason "reauth" otherwise). Any signed-in caller. Not available to MCP clients or the assistant.

Revoke an API key POST

Makes a key or MCP token stop working right away. Your own keys, or anyone's for owners and admins. Any signed-in caller. Not available to MCP clients or the assistant.