List API Keys (with Model Access Summary)

curl --request GET \
  --url 'https://api.novita.ai/openapi/v2/user/key?includePolicySummary=true' \
  --header 'Authorization: Bearer <API_KEY>'

{
  "keys": [
    {
      "name": "default",
      "id": "123456",
      "stringId": "key_xxx",
      "maskedKey": "sk_xxx***",
      "memberId": "member_xxx",
      "uuid": "user_uuid_xxx",
      "expireTime": "never",
      "createTime": "2026-07-14 12:00:00",
      "lastUsedAt": 1783764000,
      "modelAccessPolicy": {
        "mode": "selected",
        "allowedModelCount": 1,
        "excludedModelCount": 0
      }
    }
  ]
}

GET

openapi

user

key

curl --request GET \
  --url 'https://api.novita.ai/openapi/v2/user/key?includePolicySummary=true' \
  --header 'Authorization: Bearer <API_KEY>'

{
  "keys": [
    {
      "name": "default",
      "id": "123456",
      "stringId": "key_xxx",
      "maskedKey": "sk_xxx***",
      "memberId": "member_xxx",
      "uuid": "user_uuid_xxx",
      "expireTime": "never",
      "createTime": "2026-07-14 12:00:00",
      "lastUsedAt": 1783764000,
      "modelAccessPolicy": {
        "mode": "selected",
        "allowedModelCount": 1,
        "excludedModelCount": 0
      }
    }
  ]
}

List the API keys of the current team. When includePolicySummary=true, each key includes a modelAccessPolicy summary, which is convenient for showing model access status on a list page. On page initialization, call this endpoint to get the summaries first, then query a single key’s full policy as needed.

Permissions

Returned according to the platform’s existing API key read permissions: Owner / Admin can list all keys in the team; Developer and Basic members see the keys they own, within their accessible scope.

Request Headers

Authorization

string

required

Bearer authentication format, for example: Bearer {{API Key}}.

Query Parameters

includePolicySummary

boolean

Whether to return the modelAccessPolicy summary for each key. Recommended to pass true on the frontend. When omitted or false, modelAccessPolicy may not be returned.

Response Parameters

keys

object[]

required

The list of API keys.

Hide properties

name

string

required

API Key name.

string

required

Numeric ID of the API key.

stringId

string

required

The stringId of the API key, used as the path parameter for the model access policy endpoints.

maskedKey

string

required

The masked API key, for example sk_xxx***. The list endpoint does not return the plaintext key; the plaintext is shown only once at creation time.

memberId

string

required

The sub-user account ID that owns the API key.

uuid

string

required

The UUID of the user that owns the API key.

expireTime

string

required

Expiration time. never when the key never expires.

createTime

string

required

Creation time.

lastUsedAt

int64

required

Last used time, as a Unix timestamp in seconds. 0 if never used.

modelAccessPolicy

object

Model access summary, returned only when includePolicySummary=true.

Show properties

mode

string

required

Access mode. Possible values: all_enabled, selected.

allowedModelCount

int32

required

Number of accessible models.

excludedModelCount

int32

required

Number of excluded models.

curl --request GET \
  --url 'https://api.novita.ai/openapi/v2/user/key?includePolicySummary=true' \
  --header 'Authorization: Bearer <API_KEY>'

{
  "keys": [
    {
      "name": "default",
      "id": "123456",
      "stringId": "key_xxx",
      "maskedKey": "sk_xxx***",
      "memberId": "member_xxx",
      "uuid": "user_uuid_xxx",
      "expireTime": "never",
      "createTime": "2026-07-14 12:00:00",
      "lastUsedAt": 1783764000,
      "modelAccessPolicy": {
        "mode": "selected",
        "allowedModelCount": 1,
        "excludedModelCount": 0
      }
    }
  ]
}

Last modified on July 22, 2026

Check If API Key Budget Is Sufficient for a Given Cost Get API Key Model Access Policy

⌘I

Overview

Basic

Quota

Team Budget

API Key Model Access

Model APIs

GPUs

List API Keys (with Model Access Summary)

Permissions

Request Headers

Query Parameters

Response Parameters

​Permissions

​Request Headers

​Query Parameters

​Response Parameters

Permissions

Request Headers

Query Parameters

Response Parameters