Management APIManagement keys

List management keys

Requires keys:read. Owners and admins can list active keys in their team. Members see only their own active keys. Revoked keys and secrets are omitted.

Endpoint playground

Targets https://berrybox.io. Hosted availability is pending. Use a disposable key; this form keeps credentials only until you leave this endpoint or select Clear.

Requires keys:read. Owners and admins can list active keys in their team. Members see only their own active keys. Revoked keys and secrets are omitted.

Authorization

ManagementKey
AuthorizationBearer <token>

A team-bound management key with the endpoint's required scope. Dashboard cookies, sandbox keys, and OIDC tokens are not accepted.

In: header

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/api/management/v1/api-keys"
{  "ok": true,  "type": "api_key.list",  "apiKeys": [    {      "id": "string",      "name": "string",      "keyPrefix": "string",      "keyLastFour": "string",      "scopes": [        "teams:read"      ],      "createdAt": "2019-08-24T14:15:22Z",      "expiresAt": "2019-08-24T14:15:22Z",      "lastUsedAt": "2019-08-24T14:15:22Z"    }  ]}

Create a management key POST

Requires keys:write. Requested scopes must be a subset of both the caller's key scopes and current role permissions. Members create their own keys. Billing-only members cannot manage keys. Store the returned secret securely; subsequent list operations cannot retrieve it.

Revoke a management key DELETE

Requires keys:write and permission to manage this key. Revocation invalidates its secret. A missing, already revoked, or inaccessible key is not found.