Workspace · API Keys

List keys

Returns keys.

GEThttps://api.pozy.ai/v1/api-keys
listApiKeys

Guides: Authentication, Per-customer API keys, Security

Request

Send your API key as Authorization: Bearer pz_live_.... Read-only keys can call it. Authentication

Example

curl -X GET "https://api.pozy.ai/v1/api-keys" \
  -H "Authorization: Bearer $POZY_API_KEY"

Response

200 on success

  • apiKeysarray of object
    11 child fields
    • idstring
    • namestring
    • keyPreviewstring
    • expiresAtstring (date-time)
    • createdAtstring (date-time)
    • keystring
    • scopestring

      One of full, profiles. Default full.

    • profileIdsarray of object
      3 child fields
      • _idstring
      • namestring
      • colorstring
    • permissionstring

      One of read-write, read. Default read-write.

    • disabledResourceGroupsarray of string

      Each item: one of publishing, engagement, messages, contacts, analytics, ads, telephony, accounts, billing, webhooks, commerce, creator_campaigns, money, calendar, files.

    • createdByobject

      Can be null.

      2 child fields
      • idstring
      • emailstring
200 response
{
  "apiKeys": [
    {
      "id": "6bfebd43ddc270f6d2c56fc5",
      "name": "Acme",
      "keyPreview": "string",
      "expiresAt": "2026-10-02T09:00:00.000Z",
      "createdAt": "2026-10-02T09:00:00.000Z",
      "key": "string",
      "scope": "full",
      "profileIds": [
        {
          "_id": "635d87e261ae344ef27fd1df",
          "name": "Acme",
          "color": "string"
        }
      ],
      "permission": "read-write",
      "disabledResourceGroups": [
        "publishing"
      ],
      "createdBy": {
        "id": "6bfebd43ddc270f6d2c56fc5",
        "email": "alex@example.com"
      }
    }
  ]
}

Errors

Errors use one shape: { error, type, code, param?, details? }. The ones you are most likely to see here:

400invalid_request_errorA parameter or body field is missing or invalid. param names it.
401authentication_errorThe API key is missing, revoked or expired.
403permission_errorThe key is scoped to other profiles or has this resource group disabled.
429rate_limit_errorToo many requests this minute. Wait for Retry-After seconds.

Every code is listed in Errors.

More in API Keys