> ## Documentation Index
> Fetch the complete documentation index at: https://docs.novita.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List API Keys (with Model Access Summary)

List the API keys of the current team. When `includePolicySummary=true`, each key includes a `modelAccessPolicy` summary, which is convenient for showing model access status on a list page. On page initialization, call this endpoint to get the summaries first, then query a single key's full policy as needed.

## Permissions

Returned according to the platform's existing API key read permissions: Owner / Admin can list all keys in the team; Developer and Basic members see the keys they own, within their accessible scope.

## Request Headers

**Authorization** `string` *required*

Bearer authentication format, for example: Bearer \{\{API Key}}.

## Query Parameters

**includePolicySummary** `boolean`

Whether to return the `modelAccessPolicy` summary for each key. Recommended to pass `true` on the frontend. When omitted or `false`, `modelAccessPolicy` may not be returned.

## Response Parameters

**keys** `object[]` *required*

The list of API keys.

**properties**

**name** `string` *required*

API Key name.

**id** `string` *required*

Numeric ID of the API key.

**stringId** `string` *required*

The stringId of the API key, used as the path parameter for the model access policy endpoints.

**maskedKey** `string` *required*

The masked API key, for example `sk_xxx***`. The list endpoint does not return the plaintext key; the plaintext is shown only once at creation time.

**memberId** `string` *required*

The sub-user account ID that owns the API key.

**uuid** `string` *required*

The UUID of the user that owns the API key.

**expireTime** `string` *required*

Expiration time. `never` when the key never expires.

**createTime** `string` *required*

Creation time.

**lastUsedAt** `int64` *required*

Last used time, as a Unix timestamp in seconds. `0` if never used.

**modelAccessPolicy** `object`

Model access summary, returned only when `includePolicySummary=true`.

**properties**

**mode** `string` *required*

Access mode. Possible values: `all_enabled`, `selected`.

**allowedModelCount** `int32` *required*

Number of accessible models.

**excludedModelCount** `int32` *required*

Number of excluded models.

```bash theme={"system"}
curl --request GET \
  --url 'https://api.novita.ai/openapi/v2/user/key?includePolicySummary=true' \
  --header 'Authorization: Bearer <API_KEY>'
```

```json 200 theme={"system"}
{
  "keys": [
    {
      "name": "default",
      "id": "123456",
      "stringId": "key_xxx",
      "maskedKey": "sk_xxx***",
      "memberId": "member_xxx",
      "uuid": "user_uuid_xxx",
      "expireTime": "never",
      "createTime": "2026-07-14 12:00:00",
      "lastUsedAt": 1783764000,
      "modelAccessPolicy": {
        "mode": "selected",
        "allowedModelCount": 1,
        "excludedModelCount": 0
      }
    }
  ]
}
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.