> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oviond.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List API keys

> View and manage the API keys issued for your account.

API keys authenticate requests to the Oviond API from external tools, scripts, integrations, and AI connectors. Each key belongs to your account and operates at the permission level you chose when you created it.

<Note>
  Managing API keys requires admin or owner permissions.
</Note>

## View your keys

Go to **Settings → API keys** to see every key on your account. Each row shows:

* **Name** and the key **prefix** (the first characters of the key — the full value is never shown again)
* **Status** — `Active` or `Revoked`
* **Permission** — `View`, `Edit`, or `Full`
* **Created** date
* **Last used** — when the key last authenticated a request, or `Never`

## Manage keys

From the list you can:

* **Create key** — generate a new key. See [Add API key](/api-keys/add).
* **Revoke** an active key — immediately stops it from authenticating requests. See [Revoke API key](/api-keys/revoke).
* **Delete** a revoked key — permanently removes it from your account. See [Delete API key](/api-keys/delete).

The row action changes with the key's status: active keys offer **Revoke**, and revoked keys offer **Delete**. A key must be revoked before it can be deleted.

<Note>
  Revoking is immediate. Update any tools or scripts that use a key before you revoke it to avoid downtime.
</Note>

## Security best practices

* Give each key a descriptive name so you can identify and revoke individual integrations.
* Use the lowest permission a tool needs — choose **View** or **Edit** instead of **Full** where possible.
* Never commit API keys to version control.
* Use one key per integration so you can revoke a single key without affecting others.
* Rotate keys periodically, or immediately if you suspect a key has been exposed.