Authenticate with an Organization Admin User API key, sent in the skyfire-api-key header. Keys belonging to Organization Admins are accepted; a MEMBER key, or any Agent API key, is rejected with 401.

The agent is resolved through the ownership chain organization → user → agent, all scoped to your own organization. A user or agent that does not exist, belongs to another organization, or is not owned by the given user returns 404.

Both active and inactive keys are returned, oldest first, to support rotation and cleanup. Key material is never returned. Keys are identified by their id and the last four characters of the key.

Pagination

Results are ordered by creation time ascending and paginated by cursor.

When more results exist, the response includes a nextPageCursor (the id of the last key on the page) and carries a Link header pointing at the next page:

Link: <https://api.skyfire.xyz/api/v1/organizations/users/906fc259-…/agents/5d084831-…/api-keys?pageCursor=d52e9a3c-…>; rel="next"

Pass that value back as pageCursor to fetch the following page. When nextPageCursor is absent, you have reached the last page.

pageSize defaults to 100 and may not exceed 1000. A pageCursor that was not returned by a previous page of the same listing returns 400.