dev.cocore.account.listApiKeys

cocore.dev 

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "List every API key belonging to the authenticated account, most-recently-created first. The owning DID is derived from the credential presented (session cookie or `Authorization: Bearer cocore-...`); there is no way to list another account's keys. Secrets are never returned — see `apiKeyView`.",
      "errors": [
        {
          "description": "No valid session cookie or bearer key was presented.",
          "name": "AuthRequired"
        }
      ],
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "keys": {
              "items": {
                "ref": "dev.cocore.account.defs#apiKeyView",
                "type": "ref"
              },
              "type": "array"
            }
          },
          "required": [
            "keys"
          ],
          "type": "object"
        }
      },
      "type": "query"
    }
  },
  "id": "dev.cocore.account.listApiKeys",
  "lexicon": 1
}

Validate Record

Validate a record against dev.cocore.account.listApiKeys

Validation Options
Automatically resolve and include external schemas for full validation
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:5quuhkmwe2q4k3azfsgg7kdz
CID
bafyreie5ddl65a5js74r2gmptgo3ibglovfsusw4eflsepe7kzpl2gjbbm
Indexed At
2026-06-19 13:44 UTC
AT-URI
at://did:plc:5quuhkmwe2q4k3azfsgg7kdz/com.atproto.lexicon.schema/dev.cocore.account.listApiKeys

Referenced Schemas (1)

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • dev.cocore.account.createApiKey procedure

    Mint a new cocore API key for the authenticated account. Authenticate with either a console session cookie or an existing `Authorization: Bearer cocore-...` key. The full secret is returned exactly once in `secret` and …

  • dev.cocore.account.defs

    Shared type definitions for dev.cocore.account.* methods.

  • dev.cocore.account.revokeApiKey procedure

    Revoke one of the authenticated account's API keys. The key stops authenticating immediately, but the row is retained with `revokedAt` set so it stays visible in listApiKeys as a revoked key (audit trail). Use deleteApi…

  • dev.cocore.account.deleteApiKey procedure

    Hard-delete one of the authenticated account's API keys, removing the row entirely (no audit trail recovery afterwards). For most flows revokeApiKey is preferable; use this to clean up revoked or expired keys you no lon…

  • social.coves.aggregator.createApiKey procedure

    Create an API key for the authenticated aggregator. Requires OAuth authentication. The API key is returned ONCE and cannot be retrieved again. Store it securely.

Lexicon Garden

@