List Pats
PATs
List Organization API Keys
GET
List Pats
Organization API keys (
ak_…) are AnyCRM’s own credential type — see Authentication for how they differ from user personal access tokens. None of the other seven PAT/key management endpoints require a dedicated manage scope — a PAT or key is inherently scoped to the caller’s own identity, so any authenticated request can call them.
Results here are scoped to the caller’s own user_id and, via row-level security, the token’s active organization — a token with no active organization gets back an empty list rather than an error.
Auth
No scope is checked — managing keys is inherently limited to the caller’s own identity. Results are filtered to the caller’suser_id and, through row-level security, the token’s active organization.
Response
200 OK — a bare JSON array (no envelope), ordered newest-first.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.