---
title: "Your keys and connected agents in this app"
description: "Every credential acting as you here: the keys you made and the AI clients you connected."
canonical: "https://grid82.com/docs/app-api/me/keys-list"
updated: "2026-11-13"
---

# Your keys and connected agents in this app

`GET https://your-suite.grid82.app/your-app/v1/me/keys`

Every credential acting as you here: the keys you made and the AI clients you connected.

> **Note: Generic contract**
>
> Your own version of this operation, with your tables and the fields you can read, is in
> your app's document: `https://{suite}.grid82.app/{app}/v1/openapi.json`, behind your credential.
> [Why each person gets their own](/docs/start/studio-and-runtime#why-an-app-has-an-api-of-its-own).

Never the secrets themselves.

Any valid credential for this API: no scope is needed. Operation `me.keys.list`. MCP tool `me_keys_list`. CLI: `grid82 me keys list` (`npx grid82`).

**Authorizations**

- `Authorization` (bearer, in header, required)

## Response

**200**: Success

- `data` (`object[]`, required)
- `data.id` (`string`, required)
- `data.kind` (`enum<string>`, required, one of: `key, oauth`)
- `data.name` (`string`, required)
- `data.keyId` (`string`, required)
- `data.scopes` (`string[]`, required)
- `data.clientId` (`string,null`, required)
- `data.appIds` (`string[] | null`, required)
- `data.createdAt` (`string`, required)
- `data.expiresAt` (`string,null`, required)
- `data.lastUsedAt` (`string,null`, required)

```json
{
  "data": [
    {
      "id": "<string>",
      "kind": "key",
      "name": "<string>",
      "keyId": "<string>",
      "scopes": [
        "<string>"
      ],
      "clientId": null,
      "appIds": [
        "<string>"
      ],
      "createdAt": "<string>",
      "expiresAt": null,
      "lastUsedAt": null
    }
  ]
}
```

**4XX**: Refused

- `error` (`object`, required)
- `error.code` (`enum<string>`, required, one of: `not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal`)
- `error.message` (`string`, required)
- `error.details` (`Record<string, unknown>`)

```json
{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}
```

**Example request**

```bash
curl --request GET \
  --url 'https://your-suite.grid82.app/your-app/v1/me/keys' \
  --header 'Authorization: Bearer <token>'
```
