List API keys
/api-keyscurl -X GET https://api.tst.au.apgpay.dev/api-keys \
-H "Authorization: Bearer $API_KEY"Return a page of service tokens. tokenType is required, and so is the party it belongs to, there is no cross-party token read: merchantId for the two merchant types, marketplaceId for a marketplace key, enterpriseId for an enterprise key.
Permissions
serviceTokens:queryRequires the `query` action on `serviceTokens` for the supplied runtime context
Query parameters
qstringSearch. Matches an API key id or the description. An id, an email address, a phone number and any value listed as matched exactly match exactly; any other term matches without regard to case from the start of a value (or of any word in it, beside a longer word of the term), or anywhere in it from three characters, every word of it somewhere; a term that matches nothing so is read again with typos tolerated. Closest matches come first unless sort is given.
pageinteger (int32)Offset pagination: 1-based page number. Mutually exclusive with the cursor parameters.
startingAfterstringCursor pagination, moving forward: the id of the last item on the current page. Mutually exclusive with page.
endingBeforestringCursor pagination, moving backward: the id of the first item on the current page. Mutually exclusive with page.
limitinteger (int32)Maximum items per page.
sortarray of ApiKeySortFields to sort by, comma-delimited, in priority order. Prefix a field with - for descending.
columnsarray of ApiKeyColumnColumns to include, in order, when asking for text/csv. Omit for all of them. Sending it with application/json is a 400.
tokenTypeApiKeyTypeWhat kind of token. Omit it to read every kind.
MerchantPublishableMerchantSecretMarketplaceKeyEnterpriseKeyUnknownmerchantIdstringWhose tokens, for the merchant types.
marketplaceIdstringWhose tokens, for a marketplace key.
enterpriseIdstringWhose tokens, for an enterprise key.
statusone of ApiKeyStatus, array of ApiKeyStatusFilter by status. Repeat the parameter to supply several.
expiredbooleanOnly expired tokens, or only unexpired ones.
createdAfterstring (date-time)Tokens created at or after this ISO-8601 timestamp.
createdBeforestring (date-time)Tokens created before this ISO-8601 timestamp.
expiresAfterstring (date-time)Tokens expiring at or after this ISO-8601 timestamp.
expiresBeforestring (date-time)Tokens expiring before this ISO-8601 timestamp.
Responses
The response is a tagged shape: type is always "ApiKeyPageAttributes". Switch on it; subtypes can be added, and a client that already reads it will not break.
typetype = "ApiKeyPageAttributes"typeenumrequiredApiKeyViewAttributesapiKeyIdApiKeyIdrequiredIdentifier of a service token.
Example key_9f2Kd8QpLzXw
descriptionstringrequiredWhat the token is for, in words. This is how you tell two secrets apart, there is nothing else.
typeAn enterprise's key. Reaches every marketplace and merchant in the enterprise.
enterpriseIdEntIdrequiredIdentifier of an enterprise.
Example ent_9f2Kd8QpLzXw
A marketplace's key. Reaches every merchant in the marketplace.
marketplaceIdMktpIdrequiredIdentifier of a marketplace.
Example mktp_9f2Kd8QpLzXw
A merchant's publishable key, safe to put in a browser. Its value is returned on every read.
merchantIdMchtIdrequiredIdentifier of a merchant.
Example mcht_9f2Kd8QpLzXw
A merchant's secret key.
merchantIdMchtIdrequiredIdentifier of a merchant.
Example mcht_9f2Kd8QpLzXw
typeOnly these actions, on only these resources. Cannot grant anything the issuing credential lacks.
typeenumrequiredApiKeyGrantAttributesresourceApiKeyResourcerequiredThe resource this grant is over.
BlockedCardCustomerDelegatesDisputesEnterprisesFilesFxRatesLoanFacilitiesLoanProductsLoanTransactionsLoanMasterAgreements+57 moreShow fewer
Loans, LoanStatements, CreditCards, Marketplaces, MarketplaceUsers, Merchants, MerchantCustomers, MerchantKYB, MerchantPaymentProfiles, MerchantFinancials, MerchantBillingPaymentSource, MerchantState, MerchantUsers, Orders, CustomerPaymentSources, TemporaryPaymentSources, PaymentTokens, PayCards, PayPlans, PayToAgreements, Reports, Queues, Simulations, Refunds, MerchantServiceTokens, MarketplaceServiceTokens, EnterpriseServiceTokens, SourceVerifications, SystemJournals, SystemJournalEntries, SystemLedgers, SystemLedgerEntries, Transactions, IssuerTransactions, IssuerTransactionDiscrepancies, WebhookMerchantSubscriptions, WebhookMarketplaceSubscriptions, WebhookSubscriptions, Sessions, ServiceTokens, ReferenceData, Users, Roles, OidcIdps, ReportsAcquiring, ReportsLending, ReportsIssuing, ReportsCustomers, ReportsOperations, ReportsOversight, Organisations, Persons, Suppliers, Rules, MerchantStatementPasswords, MerchantTravelData, Unknown
actionsarray of ApiKeyActionThe actions this grant allows on the resource.
QuerySearchViewPIICreateUpsertUpsertMinimalUpsertPluginApplyActivateUpdate+11 moreShow fewer
UpdatePermissions, Link, Delete, Verify, Impersonate, Simulate, Pay, Transfer, SpecifySurcharge, Orchestrate, Unknown
Everything the issuing credential's own policy allows. The token is as capable as its issuer, and no more.
Everything the issuing credential's own policy allows. The token is as capable as its issuer, and no more.
statusApiKeyStatusrequiredEnabledDisabledUnknownvaluestringThe token itself, where the platform holds it in the clear, always for a publishable key, and for a merchant secret key too, which is how a dashboard shows a merchant its own. A token stored as a salted hash is never returned. Treat this field as sensitive on every read.
expiresAtstring (date-time)Example 2026-08-19T04:21:07Z
createdBystringThe user who created it. Absent for tokens the platform generated itself.
createdAtstring (date-time)requiredExample 2026-08-19T04:21:07Z
updatedAtstring (date-time)requiredExample 2026-08-19T04:21:07Z
hasMorebooleanrequiredWhether further items exist after this page.
Example true
nextStartingAfterstringId to pass as startingAfter to fetch the next page. Present in cursor mode only.
totalCountinteger (int64)Total items matching the query.
Example 42
pageinteger (int32)The 1-based page returned. Present in offset mode only.
Example 1250
totalPagesinteger (int32)Total pages available. Present in offset mode only.
Example 1250
{
"type": "ApiKeyPageAttributes",
"data": [
{
"type": "ApiKeyViewAttributes",
"apiKeyId": "key_9f2Kd8QpLzXw",
"description": "string",
"scope": {
"type": "ApiKeyScopeEnterprise",
"enterpriseId": "ent_9f2Kd8QpLzXw"
},
"permissions": {
"type": "ApiKeyPermissionsExplicit",
"grants": [
{
"type": "ApiKeyGrantAttributes",
"resource": "BlockedCard",
"actions": [
"Query"
]
}
]
},
"status": "Enabled",
"value": "string",
"expiresAt": "2026-08-19T04:21:07Z",
"createdBy": "string",
"createdAt": "2026-08-19T04:21:07Z",
"updatedAt": "2026-08-19T04:21:07Z"
}
],
"hasMore": true,
"nextStartingAfter": "string",
"totalCount": 42,
"page": 1250,
"totalPages": 1250
}Error responses
statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}statusCodeinteger (int32)requiredHTTP status code for this error
errorCodestringrequiredAn APG Pay code providing a brief explanation of the underlying error. Use this if you wish to provide custom behaviour based on the error type.
messagestringrequiredHuman readable description of the error
tracerstringAn unique identifier for the request. Provide this to the support team if you wish to query a particular error.
detailstringOptional additional details for the error.
errorTypeDescriptionstringA description of the category of errors for the given statusCode.
metadataobjectOptional key value list of metadata
{
"statusCode": 100,
"errorCode": "string",
"message": "string",
"tracer": "string",
"detail": "string",
"errorTypeDescription": "string"
}