Skip to main content
GET
List Pats
Organization API keys (ak_…) are AnyCRM’s own credential type — see Authentication for how they differ from user personal access tokens. None of the other seven PAT/key management endpoints require a dedicated manage scope — a PAT or key is inherently scoped to the caller’s own identity, so any authenticated request can call them. Results here are scoped to the caller’s own user_id and, via row-level security, the token’s active organization — a token with no active organization gets back an empty list rather than an error.

Auth

No scope is checked — managing keys is inherently limited to the caller’s own identity. Results are filtered to the caller’s user_id and, through row-level security, the token’s active organization.

Response

200 OK — a bare JSON array (no envelope), ordered newest-first.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

200 - application/json

Successful Response

id
string
required
name
string
required
key_id
string
required
pat_key
string | null
expires_at
string | null
created_at
string | null