# Retrieve API Key (Admin API) # Get API Key
The whole hunk
from line 1, old and new numbered
/
lines
from line 1
1# Get API Key
1---
2title: Retrieve API Key (Admin API)
3url: https://platform.claude.com/docs/en/api/beta/organization/api_keys/retrieve
4---
25
6# Retrieve API Key (Admin API)
7
38**GET** `/v1/organizations/api_keys/{api_key_id}`
49
5Get API Key
10Retrieve information about a single API key in your organization, looked up by its ID. This Admin API endpoint requires an Admin API key, is intended for programmatic key management, and never returns the key's secret value. To view or create your own API keys, go to [API keys](https://platform.claude.com/settings/keys) in the Claude Console.
611
712## Path parameters
813
from line 19
1419
1520- `BetaAPIKey object`
1621
22 - `type: "api_key"`
23
24 Object type.
25
26 For API Keys, this is always `"api_key"`.
27
28 default: api_key
29
1730 - `id: string`
1831
1932 ID of the API key.
from line 43
3043 creator is not recorded (legacy, workload-identity-federated, or
3144 system-created keys).
3245
33 - `id: string`
34
35 ID of the actor that created the object.
36
3746 - `type: "service_account" or "user"`
3847
3948 Type of the actor that created the object.
from line 51
4251
4352 - `"user"`
4453
54 - `id: string`
55
56 ID of the actor that created the object.
57
4558 - `expires_at: string or null`
4659
4760 RFC 3339 datetime string indicating when the API Key expires, or `null` if it never expires.
from line 87
7487
7588 - `BetaAPIKeyServiceAccountActor object`
7689
77 - `service_account_id: string`
78
79 ID of the Service Account the API key acts as.
80
8190 - `type: "service_account_actor"`
8291
8392 Principal type. Always `"service_account_actor"` for a Service Account.
from line 93
8493
8594 default: service_account_actor
8695
96 - `service_account_id: string`
97
98 ID of the Service Account the API key acts as.
99
87100 - `scope: BetaAPIKeyOrganizationScope or BetaAPIKeyWorkspaceScope`
88101
89102 Where the API key belongs: its Workspace (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's real ID even when it is the organization's default Workspace), or the organization (`{"type": "organization"}`) for a principal-bound API key that has no Workspace.
from line 132
119132 - `"expired"`
120133
121134 - `"inactive"`
122
123 - `type: "api_key"`
124
125 Object type.
126
127 For API Keys, this is always `"api_key"`.
128
129 default: api_key
130135
131136 - `workspace_id: string or null`
132137