List API Keys | Thera

Lists every API key on the company, active and revoked, including legacy ones.

Authentication

X-Thera-API-Keystring

API Key authentication via header

Path parameters

companyIdstringRequired

Response

This endpoint returns a list of objects.

idstring

Identifies the key in every other call. The service account for a self-serve key, and the stored hash of the token for a legacy one, which has no service account. The raw secret is never exposed either way.

legacyboolean

True for a key issued before self-serve. Those hold full write access on the /external endpoints and cannot be replaced in place, only revoked and reissued.

namestring

last4string

createdAtstring

activeboolean

createdByUserIdstringOptional

createdByNamestringOptional

Display name of the admin who issued the key, resolved for the settings page.

lastUsedstringOptional

expiresAtstringOptional