All requests below will use this key. Your API key is sent directly to api.cueapi.ai and never stored by the docs site.

GET/v1/auth/keys

List API Keys

Return every API key on the authenticated account — active and revoked.

Returns both active and revoked keys so you can see what's out there and what's been rotated. Sorted newest first by created_at.

Scope is the full account: the key you authenticate with sees every key the owning user has ever created. Revoked keys remain queryable here until they're hard-deleted 30 days after revocation.

Request

bash
curl https://api.cueapi.ai/v1/auth/keys \
  -H "Authorization: Bearer cue_sk_YOUR_KEY"

Response

json
{
  "keys": [
    {
      "id": "6e8fc3a0-7a12-4f8a-b8b6-9c5e1d2a3b4c",
      "prefix": "cue_sk_a3f9",
      "label": "claude-desktop",
      "created_at": "2026-04-18T05:12:04Z",
      "created_by": "user",
      "last_used_at": "2026-04-18T05:44:18Z",
      "revoked_at": null
    },
    {
      "id": "2b7d14c5-9e1f-4e3b-a8c2-7d5f1e9a0b3c",
      "prefix": "cue_sk_b2e1",
      "label": "default",
      "created_at": "2025-11-02T10:03:44Z",
      "created_by": "migration",
      "last_used_at": "2026-04-18T05:59:23Z",
      "revoked_at": null
    },
    {
      "id": "9f6e82a1-3b4c-5d6e-7f8a-9b0c1d2e3f4a",
      "prefix": "cue_sk_c1d0",
      "label": "ci-server-old",
      "created_at": "2026-03-12T14:22:01Z",
      "created_by": "user",
      "last_used_at": "2026-03-14T09:17:54Z",
      "revoked_at": "2026-03-14T09:18:02Z"
    }
  ]
}

Response fields

FieldTypeNotes
idUUIDStable identifier used in PATCH and DELETE
prefixstringFirst 8-12 characters of the plaintext — enough for a human to identify the key, not enough to use it
labelstringUser-provided name
created_atISO 8601 timestamp
created_by"user" / "register" / "migration" / "mcp-exchange"Provenance of the row
last_used_atISO 8601 or nullUpdated in the background after each successful auth
revoked_atISO 8601 or nullnull = active

Note

created_by="migration" rows came from the 039 multi-key-scoping backfill — they're the single key each pre-multi-key user had before the feature shipped. They behave identically to user-created keys.

GET/v1/auth/keys
Try it
Enter your API key above to send requests
How do I know if my agent ran successfully?
Ctrl+K