Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity and Access Management
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
  • Terraform reference
    • API authentication
      • Overview
        • Overview
        • List
        • Get
        • Create
        • Update
        • Delete
        • ListOperations
        • ListScopes
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • HTTP request
  • Query parameters
  • Response
  • ApiKey
  1. API reference
  2. REST
  3. ApiKey
  4. List

Identity and Access Management API, REST: ApiKey.List

Written by
Yandex Cloud
Updated at December 15, 2025
  • HTTP request
  • Query parameters
  • Response
  • ApiKey

Retrieves the list of API keys for the specified service account.

HTTP requestHTTP request

GET https://iam.api.cloud.yandex.net/iam/v1/apiKeys

Query parametersQuery parameters

Field

Description

serviceAccountId

string

ID of the service account to list API keys for.
To get the service account ID, use a yandex.cloud.iam.v1.ServiceAccountService.List request.
If not specified, it defaults to the subject that made the request.

The maximum string length in characters is 50.

pageSize

string (int64)

The maximum number of results per page to return. If the number of available
results is larger than pageSize,
the service returns a ListApiKeysResponse.nextPageToken
that can be used to get the next page of results in subsequent list requests.
Default value: 100.

Acceptable values are 0 to 1000, inclusive.

pageToken

string

Page token. To get the next page of results, set pageToken
to the ListApiKeysResponse.nextPageToken
returned by a previous list request.

The maximum string length in characters is 2000.

ResponseResponse

HTTP Code: 200 - OK

{
  "apiKeys": [
    {
      "id": "string",
      "serviceAccountId": "string",
      "createdAt": "string",
      "description": "string",
      "lastUsedAt": "string",
      "scope": "string",
      "scopes": [
        "string"
      ],
      "expiresAt": "string"
    }
  ],
  "nextPageToken": "string"
}

Field

Description

apiKeys[]

ApiKey

List of API keys.

nextPageToken

string

This token allows you to get the next page of results for list requests. If the number of results
is larger than ListApiKeysRequest.pageSize, use
the nextPageToken as the value
for the ListApiKeysRequest.pageToken query parameter
in the next list request. Each subsequent list request will have its own
nextPageToken to continue paging through the results.

ApiKeyApiKey

An ApiKey resource. For more information, see Api-Key.

Field

Description

id

string

ID of the API Key.

serviceAccountId

string

ID of the service account that the API key belongs to.

createdAt

string (date-time)

Creation timestamp.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

description

string

Description of the API key. 0-256 characters long.

lastUsedAt

string (date-time)

Timestamp for the last authentication using this API key.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

scopes[]

string

Scopes of the API key. 0-256 characters long.

expiresAt

string (date-time)

API key expiration timestamp.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

Was the article helpful?

Previous
Overview
Next
Get
© 2026 Direct Cursus Technology L.L.C.