List MCP keys
/v1/mcp-keysList MCP keys.
A workspace's MCP keys, newest first, revoked ones included. Secrets are never returned, only key_hint.
Requires an organization admin key, or a key of that workspace (any role).
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Query parameters
organizationstringrequiredThe organization's identifier (slug).
workspace_idstring<uuid>requiredThe workspace (UUID).
Responses
dataobject[]The keys.
Child attributes
idstring<uuid>The key's ID (UUID), used in the API paths.
namestringDisplay name.
organizationstringThe organization that owns it.
workspace_idstring<uuid>The workspace it belongs to (UUID).
key_hintstringThe last four characters of the key.
statusstringACTIVEorREVOKED.tool_allowliststring[]The tools it may call (
{server slug}/{tool name}or{server slug}/*). Absent: every tool the registry allows.rate_limit_rpminteger<int32>Gateway calls per minute. Absent: only the plan's per-workspace limit.
rate_limit_rpdinteger<int32>Gateway calls per day. Absent: no daily limit of its own.
expires_atstring<date-time>When it stops working (ISO 8601). Absent: never.
last_used_atstring<date-time>When it was last used on the gateway (ISO 8601).
created_bystringThe user who created it.
created_atstring<date-time>When it was created (ISO 8601).