List your API keys

GET /keys

Requires the businesses scope.

Every key under your client: the one you are using and any others, live or revoked. Keys are minted and revoked by us (the Authentication guide explains rotation); this is how you see that a key you did not ask for exists.

Response

200: { "ok": true, … }

Field	Type		Description
`ok`	boolean	required
`keys`	array of ApiKey	required

Errors: 400, 401, 403, 404, 429. Every failure answers { "error": …, "reason": … }. Branch on reason.

GET /keys

curl -X GET "$BASE/keys" \
  -H "X-Api-Key: $KEY"

const res = await fetch(`${BASE}/keys`, {
  method: 'GET',
  headers: {
    'X-Api-Key': KEY,
  },
})
const data = await res.json()
if (!data.ok) throw new Error(data.reason)

import requests
res = requests.get(
    f"{BASE}/keys",
    headers={"X-Api-Key": KEY},
)
data = res.json()

Set BASE to https://api.billos.co.il/v1 and KEY to your bk_live_… key, or a bk_test_… key to run it against the sandbox.

Manage your businesses, keys and webhooks in the BillOS Console.