API Keys changedapi/admin/api_keys
Nearest release: v2.1.250, published an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+195added
Lines−57removed
From line
36
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits5to this page, all time
The whole hunk
from line 36, old and new numbered
/
from line 36
3636
3737 ID of the actor that created the object.
3838
39 - `type: string`
39 - `type: "service_account" or "user"`
4040
4141 Type of the actor that created the object.
4242
43 - `"service_account"`
44
45 - `"user"`
46
4347 - `expires_at: string or null`
4448
4549 RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires.
from line 58
5458
5559 Partially redacted hint for the API key.
5660
57 - `principal: object or null`
61 - `principal: object or object or null`
5862
59 The ID and type of the principal the API key acts as, or `null` if the key is not bound to a principal.
63 The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal.
6064
61 - `id: string`
65 - `UserActor object`
6266
63 ID of the principal the API key acts as: a User ID (`user_...`) when the type is `user`, or a Service Account ID (`svac_...`) when the type is `service_account`.
67 - `type: "user_actor"`
6468
65 - `type: "service_account" or "user"`
69 Principal type. Always `"user_actor"` for a User.
6670
67 Type of the principal the API key acts as.
71 default: user_actor
6872
69 - `"service_account"`
73 - `user_id: string`
7074
71 - `"user"`
75 ID of the User the API key acts as.
7276
77 - `ServiceAccountActor object`
78
79 - `service_account_id: string`
80
81 ID of the Service Account the API key acts as.
82
83 - `type: "service_account_actor"`
84
85 Principal type. Always `"service_account_actor"` for a Service Account.
86
87 default: service_account_actor
88
89 - `scope: object or object`
90
91 Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace.
92
93 - `Organization object`
94
95 - `type: "organization"`
96
97 Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope.
98
99 default: organization
100
101 - `Workspace object`
102
103 - `type: "workspace"`
104
105 Scope type. Always `"workspace"`: the API key belongs to one Workspace.
106
107 default: workspace
108
109 - `workspace_id: string`
110
111 ID of the Workspace the API key belongs to. Unlike the deprecated top-level `workspace_id`, this is the Workspace's real ID even for the organization's default Workspace.
112
73113 - `status: "active" or "archived" or "expired" or "inactive"`
74114
75115 Status of the API key.
from line 132
92132
93133 - `workspace_id: string or null`
94134
95 ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace.
135 **Deprecated**: Use `scope` instead. `workspace_id` is `null` both for an API key in the default Workspace and for a principal-bound API key that has no Workspace.
96136
137 Deprecated: use `scope` instead. ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace. Also `null` for a principal-bound API key that has no Workspace; `scope` tells the two apart.
138
97139### Example
98140
99141```bash
from line 158
116158 "name": "Developer Key",
117159 "partial_key_hint": "sk-ant-api03-R2D...igAA",
118160 "principal": {
119 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
120 "type": "user"
161 "type": "user_actor",
162 "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q"
121163 },
164 "scope": {
165 "type": "workspace",
166 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
167 },
122168 "status": "active",
123169 "type": "api_key",
124170 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
from line 239
193239
194240 ID of the actor that created the object.
195241
196 - `type: string`
242 - `type: "service_account" or "user"`
197243
198244 Type of the actor that created the object.
199245
246 - `"service_account"`
247
248 - `"user"`
249
200250 - `expires_at: string or null`
201251
202252 RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires.
from line 261
211261
212262 Partially redacted hint for the API key.
213263
214 - `principal: object or null`
264 - `principal: object or object or null`
215265
216 The ID and type of the principal the API key acts as, or `null` if the key is not bound to a principal.
266 The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal.
217267
218 - `id: string`
268 - `UserActor object`
219269
220 ID of the principal the API key acts as: a User ID (`user_...`) when the type is `user`, or a Service Account ID (`svac_...`) when the type is `service_account`.
270 - `type: "user_actor"`
221271
222 - `type: "service_account" or "user"`
272 Principal type. Always `"user_actor"` for a User.
223273
224 Type of the principal the API key acts as.
274 default: user_actor
225275
226 - `"service_account"`
276 - `user_id: string`
227277
228 - `"user"`
278 ID of the User the API key acts as.
229279
280 - `ServiceAccountActor object`
281
282 - `service_account_id: string`
283
284 ID of the Service Account the API key acts as.
285
286 - `type: "service_account_actor"`
287
288 Principal type. Always `"service_account_actor"` for a Service Account.
289
290 default: service_account_actor
291
292 - `scope: object or object`
293
294 Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace.
295
296 - `Organization object`
297
298 - `type: "organization"`
299
300 Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope.
301
302 default: organization
303
304 - `Workspace object`
305
306 - `type: "workspace"`
307
308 Scope type. Always `"workspace"`: the API key belongs to one Workspace.
309
310 default: workspace
311
312 - `workspace_id: string`
313
314 ID of the Workspace the API key belongs to. Unlike the deprecated top-level `workspace_id`, this is the Workspace's real ID even for the organization's default Workspace.
315
230316 - `status: "active" or "archived" or "expired" or "inactive"`
231317
232318 Status of the API key.
from line 335
249335
250336 - `workspace_id: string or null`
251337
252 ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace.
338 **Deprecated**: Use `scope` instead. `workspace_id` is `null` both for an API key in the default Workspace and for a principal-bound API key that has no Workspace.
253339
340 Deprecated: use `scope` instead. ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace. Also `null` for a principal-bound API key that has no Workspace; `scope` tells the two apart.
341
254342- `first_id: string or null`
255343
256344 First ID in the `data` list. Can be used as the `before_id` for the previous page.
from line 375
287375 "name": "Developer Key",
288376 "partial_key_hint": "sk-ant-api03-R2D...igAA",
289377 "principal": {
290 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
291 "type": "user"
378 "type": "user_actor",
379 "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q"
292380 },
381 "scope": {
382 "type": "workspace",
383 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
384 },
293385 "status": "active",
294386 "type": "api_key",
295387 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
from line 447
355447
356448 ID of the actor that created the object.
357449
358 - `type: string`
450 - `type: "service_account" or "user"`
359451
360452 Type of the actor that created the object.
361453
454 - `"service_account"`
455
456 - `"user"`
457
362458 - `expires_at: string or null`
363459
364460 RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires.
from line 469
373469
374470 Partially redacted hint for the API key.
375471
376 - `principal: object or null`
472 - `principal: object or object or null`
377473
378 The ID and type of the principal the API key acts as, or `null` if the key is not bound to a principal.
474 The principal the API key acts as (a User or a Service Account), or `null` if the API key is not bound to a principal.
379475
380 - `id: string`
476 - `UserActor object`
381477
382 ID of the principal the API key acts as: a User ID (`user_...`) when the type is `user`, or a Service Account ID (`svac_...`) when the type is `service_account`.
478 - `type: "user_actor"`
383479
384 - `type: "service_account" or "user"`
480 Principal type. Always `"user_actor"` for a User.
385481
386 Type of the principal the API key acts as.
482 default: user_actor
387483
388 - `"service_account"`
484 - `user_id: string`
389485
390 - `"user"`
486 ID of the User the API key acts as.
391487
488 - `ServiceAccountActor object`
489
490 - `service_account_id: string`
491
492 ID of the Service Account the API key acts as.
493
494 - `type: "service_account_actor"`
495
496 Principal type. Always `"service_account_actor"` for a Service Account.
497
498 default: service_account_actor
499
500 - `scope: object or object`
501
502 Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace.
503
504 - `Organization object`
505
506 - `type: "organization"`
507
508 Scope type. Always `"organization"`: the API key has no Workspace. Only a principal-bound API key can have this scope.
509
510 default: organization
511
512 - `Workspace object`
513
514 - `type: "workspace"`
515
516 Scope type. Always `"workspace"`: the API key belongs to one Workspace.
517
518 default: workspace
519
520 - `workspace_id: string`
521
522 ID of the Workspace the API key belongs to. Unlike the deprecated top-level `workspace_id`, this is the Workspace's real ID even for the organization's default Workspace.
523
392524 - `status: "active" or "archived" or "expired" or "inactive"`
393525
394526 Status of the API key.
from line 543
411543
412544 - `workspace_id: string or null`
413545
414 ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace.
546 **Deprecated**: Use `scope` instead. `workspace_id` is `null` both for an API key in the default Workspace and for a principal-bound API key that has no Workspace.
415547
548 Deprecated: use `scope` instead. ID of the Workspace associated with the API key, or `null` if the API key belongs to the default Workspace. Also `null` for a principal-bound API key that has no Workspace; `scope` tells the two apart.
549
416550### Example
417551
418552```bash
from line 571
437571 "name": "Developer Key",
438572 "partial_key_hint": "sk-ant-api03-R2D...igAA",
439573 "principal": {
440 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
441 "type": "user"
574 "type": "user_actor",
575 "user_id": "user_01WCz1FkmYMm4gnmykNKUu3Q"
576 },
577 "scope": {
578 "type": "workspace",
579 "workspace_id": "wrkspc_01JwQvzr7rXLA5AGx3HKfFUJ"
442580 },
443581 "status": "active",
444582 "type": "api_key",
No line in this hunk matches that.