# List your API keys

`GET /keys`

Requires the `businesses` scope.

Every key under your client: the one you are using and any others, live or revoked. Keys are minted and revoked by us (the Authentication guide explains rotation); this is how you see that a key you did not ask for exists.

## Response

`200`: `{ "ok": true, … }`

| Field | Type | | Description |
|---|---|---|---|
| `ok` | boolean | **required** |  |
| `keys` | array of ApiKey | **required** |  |

Errors: `400`, `401`, `403`, `404`, `429`. Every failure answers `{ "error": …, "reason": … }`. Branch on `reason`.

## Examples

### cURL

```bash
curl -X GET "$BASE/keys" \
  -H "X-Api-Key: $KEY"
```
### Node

```node
const res = await fetch(`${BASE}/keys`, {
  method: 'GET',
  headers: {
    'X-Api-Key': KEY,
  },
})
const data = await res.json()
if (!data.ok) throw new Error(data.reason)
```
### Python

```python
import requests
res = requests.get(
    f"{BASE}/keys",
    headers={"X-Api-Key": KEY},
)
data = res.json()
```