> ## Documentation Index
> Fetch the complete documentation index at: https://docs.architect.exchange/llms.txt
> Use this file to discover all available pages before exploring further.

# Get API keys



## OpenAPI

````yaml openapi/api-gateway.json GET /api-keys
openapi: 3.1.0
info:
  title: ax-api-gateway
  description: ''
  license:
    name: ''
  version: 15.24.0
servers:
  - url: https://gateway.architect.exchange/api
security: []
tags:
  - name: api-gateway
    description: API gateway
paths:
  /api-keys:
    get:
      tags:
        - api-gateway
      operationId: get_api_keys
      responses:
        '200':
          description: List of API keys
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetApiKeysResponse'
      security:
        - session_token: []
components:
  schemas:
    GetApiKeysResponse:
      type: object
      required:
        - api_keys
      properties:
        api_keys:
          type: array
          items:
            $ref: '#/components/schemas/ApiKeyInfo'
    ApiKeyInfo:
      type: object
      required:
        - api_key
        - created_at
        - permissions
      properties:
        account_ids:
          type:
            - array
            - 'null'
          items:
            type: string
          description: >-
            Accounts this key may act on. `null` means every account the owner
            can

            access; otherwise the key is restricted to exactly these accounts.
        allowed_ips:
          type:
            - array
            - 'null'
          items:
            type: string
        api_key:
          type: string
        created_at:
          type: string
          format: date-time
        permissions:
          $ref: '#/components/schemas/ApiKeyPermissions'
          description: The key's granted permissions.
    ApiKeyPermissions:
      type: object
      description: >-
        Per-key permission flags, scoping what an API key may do on the accounts
        it

        targets. Mirrors the granular account permissions: the effective
        authority on

        a request is these flags intersected with the user's current permissions
        on

        the requested account, so a key can never out-rank its owner.
      required:
        - can_list
        - can_read
        - can_set_limits
        - can_reduce_or_close
        - can_trade
      properties:
        can_list:
          type: boolean
        can_read:
          type: boolean
        can_reduce_or_close:
          type: boolean
        can_set_limits:
          type: boolean
        can_trade:
          type: boolean
  securitySchemes:
    session_token:
      type: http
      scheme: bearer
      description: User session token

````