Token360
Log InSign Up

List Control Keys

GET/enterprise/control-keys

Lists owned control-key metadata, including scopes and expiry. Raw secrets are not returned.

Authentication

Enterprise-owner session JWT. Management, provisioning and inference keys are not accepted.

Authorization: Bearer <USER_JWT>

Approval and retry guide

Response

HTTP 200; code: 200. Values below are illustrative; fields use camelCase.

codeinteger

200

dataarray
data.hashstring
data.namestring
data.keyDisplaystring
data.statusstring
data.allowedIpsarray
data.expiresAtstring | null
data.createdAtstring
data.keyTypestring
data.scopesarray

Errors

Check both HTTP status and code; on failure inspect serviceCode, msg and traceId. Invalid credentials receive no data; enterprise-owner privileges are required. Cross-tenant resources are inaccessible. Acceptance or pending approval does not mean business completion.

Request

Shell
1curl -X GET "https://api.token360.ai/enterprise/control-keys" \
2  -H "Authorization: Bearer $USER_JWT"

Response

JSON
1{
2  "code": 200,
3  "msg": "success",
4  "data": [
5    {
6      "hash": "<KEY_HASH>",
7      "name": "service-key",
8      "keyDisplay": "sk-…",
9      "status": "ACTIVE",
10      "allowedIps": [],
11      "expiresAt": null,
12      "createdAt": "2026-11-03T00:00:00Z",
13      "keyType": "MANAGEMENT",
14      "scopes": [
15        "tenant:billing:read"
16      ]
17    }
18  ]
19}
Was this page helpful?
List Control Keys · Token360