# listApiKeys

> Part of the MAP Audio Music API docs. Index of every page: https://map.audio/developers/music-api/llms.txt. OpenAPI document: https://map.audio/developers/music-api/openapi.json.

`GET https://api.map.audio/v1/api-keys`

List API keys

The account's API keys, newest first, without their secrets; `prefix` shows each one's first characters so you can tell them apart. Free.

Auth: `Authorization: Bearer` with an API key or a map.audio access token. Not an MCP tool: API keys are created, listed and revoked signed in at https://map.audio/music, so a connected app never holds or handles credentials.

## Example

```sh
curl -sS "https://api.map.audio/v1/api-keys" \
  -H "Authorization: Bearer $MAP_API_KEY" \
  -H "Map-Version: 2026-11-01"
```

### 200: One key

```json
{
  "object": "list",
  "data": [
    {
      "object": "api_key",
      "id": "key_01M6BPR91W1E1YGMF0P6TAZZNG",
      "name": "Build server",
      "mode": "test",
      "prefix": "sk_test_7Hq2",
      "createdAt": "2026-10-28T09:12:44.031Z",
      "lastUsedAt": "2026-11-01T14:03:31.000Z",
      "revokedAt": null
    }
  ]
}
```

### 400: Invalid request

```json
{
  "error": {
    "type": "invalid_request",
    "code": "invalid_request",
    "message": "\"cursor\" is not a parameter of GET /v1/api-keys; it takes none.",
    "param": "cursor",
    "retryable": false,
    "jobId": null,
    "docUrl": "https://map.audio/developers/music-api/errors#invalid_request",
    "requestId": "9a3f7c2e5b1d8f40-LHR"
  }
}
```

## Responses

- `200`: Keys.
- `400`: Invalid request
- `default`: Any other error: `error.code` names it, `error.param` the field at fault, and `error.docUrl` its entry in the error catalogue.

## Errors

- [`invalid_request`](https://map.audio/developers/music-api/errors#invalid_request)