Retrieve API Key
Retrieves an API key with its effective permission grants. The full secret is never returned — rotate the key if it was lost.
Authorizations
A company API key, company scoped JWT, app API key, or user OAuth token. You must prepend your key/token with the word 'Bearer', which will look like Bearer ***************************
Headers
Pins the request to a dated API version.
"2026-07-20"
Path Parameters
API key ID, prefixed apik_.
Response
api key retrieved with grants but never the secret
When the API key was created, as an ISO 8601 timestamp.
When the API key stops working, as an ISO 8601 timestamp. null means it never expires.
API key ID, prefixed apik_.
IPv4/IPv6 CIDR ranges allowed to use this key. null or empty means requests are accepted from any IP.
Whether this is the resource's default API key. Default keys cannot be updated or deleted, only rotated.
Human-readable name identifying the API key, or null when none was set.
Masked version of the secret key, so the key can be recognized without revealing the full secret.
System role the key inherits its permissions from, or null when it uses an explicit permissions policy. Only account API keys can use a system role.
owner, admin, moderator, sales_manager, advertiser, null "owner"
When the API key was last updated, as an ISO 8601 timestamp.
The full secret used to authenticate requests. Returned only once, on create and rotate responses — store it immediately.

