curl https://xquik.com/api/v1/api-keys \
-H "Cookie: session=YOUR_SESSION_TOKEN" | jq
Session cookie from the dashboard. Format: session=YOUR_SESSION_TOKEN.
Response
200 OK
401 Unauthenticated
Array of API key objects.
Unique identifier for the API key.
First 8 characters of the key including the xq_ prefix (e.g. "xq_a1b2").
Whether the key is currently active.
ISO 8601 creation timestamp.
ISO 8601 timestamp of the last API call made with this key. Omitted if never used.
{
"keys": [
{
"id": "42",
"name": "Production",
"prefix": "xq_a1b2",
"isActive": true,
"createdAt": "2026-02-24T10:30:00.000Z",
"lastUsedAt": "2026-02-24T18:45:12.000Z"
},
{
"id": "43",
"name": "Staging",
"prefix": "xq_c3d4",
"isActive": true,
"createdAt": "2026-02-20T09:00:00.000Z"
}
]
}
{ "error": "unauthenticated" }
This endpoint requires session cookie authentication (dashboard sign-in). API keys cannot list other API keys.Related: Create API Key · Revoke API Key 
