# Flowg8 · API keys

List key metadata as a signed-in administrator. Listing never returns secrets.

Scopes: flows:read, flows:write, runs:read, runs:start, organization:read, organization:write. Write also includes read for the same resource. A start-only key cannot read flows or runs without additional scopes.

## GET /v1/api-keys

Authentication: FLOWG8_ACCESS_TOKEN from Flowg8 sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator or Sandbox developer required. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Request example (replace example IDs)

```sh
curl "https://api.flowg8.io/v1/api-keys" \
  -H "authorization: Bearer $FLOWG8_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001"
```

## Response excerpt

```json
{
  "items": []
}
```

Source: /docs/api-keys
Full schemas: /docs/openapi.json