Retrieve an API key
Returns the key. The full key value is not included.
Authorizations
A merchant standard (sk_…) or restricted (rk_…) secret key sent as Authorization: Bearer <key>.
Path Parameters
The API key identifier (sk_… for secret keys, pk_… for publishable keys).
Response
The API key. The full key value is not included.
Standard read view of an API key. Does not include the full authenticatable
token — only the key_prefix for identification.
Unique resource identifier. sk_… for secret keys; pk_… for publishable keys.
First 19 characters of the full key. Used to identify the key without exposing the secret.
secret for server-side keys; publishable for client-side keys.
secret, publishable Environment scope this key operates in.
test, live active means the key can authenticate requests. revoked means it has been permanently disabled.
active, revoked Whether this key belongs to a merchant or a platform.
merchant, platform Identifier of the owning merchant or platform.
Permission scopes granted to this key.
Unix epoch seconds when the key was created.
Unix epoch seconds when the key was last updated.
Authorization policy for secret keys. Omitted for publishable keys and for temporarily unclassified legacy rows during rollout.
standard, restricted Display name, if set.
Notes, if set.
Unix epoch seconds when the key expires. Null if the key does not expire.

