OpenAI API (unofficial showcase)
GET/organization/projects/{project_id}/api_keys

List API keys for an organization project

Lists API keys in an organization project. Use owner_project_access to filter keys by their owner's effective project access, and limit and after to control and continue through the results. The response includes redacted key values, owner details, and a has_more flag for pagination.

4 parameters
project_idstringrequired
The identifier of the project whose API keys to list.
limitintegeroptional
Maximum number of API keys to return. Must be between 1 and 100. Defaults to 20 when omitted.
Default:20
afterstringoptional
API key ID cursor that marks the starting point for the next page of results.
owner_project_accessstringoptional
Filter by the owner's effective project access: `active`, `inactive`, or `any`. When omitted, the endpoint applies its existing membership-based visibility rules, which may exclude some enabled keys.
Allowed:activeinactiveany

5 status codes
200Returns a list object containing project API key records with redacted values, owner details, cursor IDs for the first and last keys, and a `has_more` flag.
objectstringrequired
Allowed:list
dataarray<object>required
first_idstringoptional
last_idstringoptional
has_morebooleanrequired
400Returned when listing parameters are invalid or the project is archived.
errorobjectrequired
403Returned when the authenticated user does not have permission to list project API keys.
errorobjectrequired
Details about the permission error.
404Returned when the project is not found.
errorobjectrequired
429Returned when too many management requests are made; reduce the request rate and try again later.
errorobjectrequired

Error handling

A 400 is returned when listing parameters are invalid or the project is archived, and a 403 is returned when the authenticated user lacks permission. A 404 is returned when the project is not found; a 429 is returned when management requests are sent too frequently. limit must be between 1 and 100, and owner_project_access must be active, inactive, or any when supplied.