List API keys
List API keys. Returns metadata for each key (id, name, description, key_type, status, redacted_key, created_at, expires_at, created_by_user_id). The raw key secret is never returned after creation.
Results can be filtered by key type, status, space, and creator. Responses are
paginated; use limit and cursor and the response pagination.next_cursor for
subsequent pages.
Service keys (key_type=service): Provide space_id to return all service keys for
that space. When key_type is omitted alongside space_id, service keys are returned
implicitly. Requires the SERVICE_KEY_READ permission in the space (or account/space admin).
Optionally combine with user_id to filter service keys by their creator — available to any
caller with space access (not admin-gated).
User keys (key_type=user): Returned by default (no space_id). Provide user_id to
view keys belonging to a specific user — account admins only; non-admins receive 403.
Authorization: Requires the developer user permission flag or account admin role.
Returns 403 when neither condition is met.
Authorizations
Most Arize AI endpoints require authentication. For those endpoints that require authentication, include your API key in the request header using the format
Query Parameters
Filter by API key type.
- user - Key associated with a specific user.
- service - Key associated with a bot user for service authentication.
Type of the API key.
- user - Key associated with a specific user.
- service - Key associated with a bot user for service authentication.
user, service Filter by API key status.
- active - Only return keys that are valid for use.
- deleted - Only return keys that have been deleted.
When not specified, defaults to active.
Current status of the API key.
- active - The key is valid for use.
- deleted - The key has been deleted by a user.
active, deleted Filter search results to a particular space ID A universally unique identifier (base64-encoded opaque string).
"RW50aXR5OjEyMzQ1"
Filter API keys by the user who created them (base64 identifier (base64)).
When used with space_id, filters service keys by creator — available to any user with space access.
When used without space_id, filters user keys by creator — account admins only (non-admins receive 403).
Can be combined with key_type to further narrow results by key type.
A universally unique identifier (base64-encoded opaque string).
"RW50aXR5OjEyMzQ1"
Maximum items to return
1 <= x <= 100Opaque pagination cursor returned from a previous response
(pagination.next_cursor). Treat it as an unreadable token; do not
attempt to parse or construct it.