List API Keys
List API keys belonging to the calling user. API keys authenticate requests to the management API via the X-API-KEY header — distinct from agent auth tokens, which are presented by tunnel-server agents at handshake.
Account scope & lifecycle: API keys belong to your active account and act as their creator — each inherits the creator's role permissions in that account, resolved live per request. A key created by a member is tied to that member's account membership: when they are removed from (or leave) the account, their keys for it are revoked automatically (requests return 401). An account owner/admin can also revoke any key bound to the account. Use switch account to manage keys in a different account.
Returned keys are masked — the response shows only the first/last few characters of each api_key. The full secret is only visible once at creation time. If a key has been lost, delete it and create a new one rather than trying to recover the value.
Response (200 OK)
created_at DESC (newest first).et_sk_a1b2...f6e7). The full value cannot be retrieved here — recreate the key if you've lost it.null for non-expiring keys.last_used_at may be the zero time on never-used keys.