List API Keys

August 3, 2026 ยท View on GitHub

Use case

Lists API keys registered for a merchant without exposing raw key secrets.

Authentication

Dashboard protected. Send Authorization: Bearer <jwt_token>. In sandbox, also send x-feature: decision-engine.

For local development, start with:

export BASE_URL=http://localhost:8080
export AUTH_HEADER="Authorization: Bearer <jwt_token>"
# Sandbox only:
# export BASE_URL=https://sandbox.hyperswitch.io
# export FEATURE_HEADER="x-feature: decision-engine"

Request

  • Method and path: GET /api-key/list/{merchant_id}
  • Parameters:
    • merchant_id (path, required, string)
  • Body: Path parameter merchant_id identifies the merchant account.

Example

List keys

curl "$BASE_URL/api-key/list/merchant_demo" \
  --header "$AUTH_HEADER"

Response

[
  {
    "key_id": "018f2c1a-...",
    "key_prefix": "DE_abcd1234",
    "merchant_id": "merchant_demo",
    "description": "backend integration key",
    "is_active": true,
    "created_at": "2026-04-26 10:00:00.000000"
  }
]

Notes

  • Use this for key management screens.
  • Revoke by key_id, not by raw key value.