Skip to main content
GET
List API keys
The response includes active, expired, and revoked keys. It never includes plaintext key values.

Manage API keys in Darwin

Review your keys in Developer settings.

Authorizations

__Secure-better-auth.session_token
string
cookie
required

The HTTP-only Darwin account session cookie set after sign-in. Local development uses better-auth.session_token without the __Secure- prefix.

Response

Every API key owned by the account, including expired and revoked keys.

apiKeys
object[]
required
Last modified on September 21, 2026