List Keys
API Keys
List Keys
List the caller’s personal access tokens, newest first.
Revoked and expired keys are included so the user can confirm a revocation took effect and can tell an expired key apart from one that was deleted. Secrets are never returned; only the prefix and last four characters are, which are enough to identify a key without disclosing it.
GET
List Keys
Authorizations
A personal access token (haico_pat_...), created under Profile → API keys. Send it as Authorization: Bearer <key>. The browser session JWT is also accepted but is an internal mechanism and is not part of the public contract.
Response
200 - application/json
Successful Response
All of the caller's keys, newest first.