# flow2act · API-Keys

Liste Schlüsselmetadaten als angemeldeter Administrator. Listen liefern niemals Secrets.

Scopes: flows:read, flows:write, runs:read, runs:start, organization:read, organization:write. Schreibrechte enthalten Leserechte derselben Ressource. Start-Schlüssel lesen ohne zusätzliche Scopes keine Flows oder Ausführungen.

## GET /v1/api-keys

Authentication: FLOW2ACT_ACCESS_TOKEN from flow2act sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator oder Sandbox-Entwickler erforderlich. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Request example (replace example IDs)

```sh
curl "https://api.flow2act.com/v1/api-keys" \
  -H "authorization: Bearer $FLOW2ACT_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001"
```

## Response excerpt

```json
{
  "items": []
}
```

Source: /docs/api-keys
Full schemas: /docs/openapi.json