keys.get

One API key

GET/keys/{id}

Operation: keys.get
MCP tool: not exposed over MCP

One key of this account, by id. A key belonging to another account is a 404, never a 403.

curl -X GET "https://api.gogoscreen.com/api/v1/keys/<id>" \
  -H "Authorization: Bearer $GOGOSCREEN_API_KEY"

The shape of a request to this operation. The dashboard sends it with the signed in person's session; an API key is refused.

At a glance

Fact	Detail
Scopes	`keys:manage`
Credentials	a signed in dashboard session. An API key cannot be granted these scopes, so this operation is reachable only from a signed in dashboard session.
Rate limit	120 requests a minute per credential, in the `write` class.
Idempotency	Not applicable. This operation changes nothing.
MCP tool	Not exposed over MCP.
Always sets	`Cache-Control: private, no-store`
Audit	Every call is written to the audit log as `api_key_management`.

Path parameters

Name	Type	Required	Description
id	string	Required	The resource `id`, from a create answer or the matching list.format: uuid

Response

Answers 200. Every answer also carries RateLimit-Limit, RateLimit-Remaining and RateLimit-Reset, and every error body carries a requestId.

200 OK

One API key

Name Type Description

apiKey object

12 fields inside apiKey

Name	Type	Description
createdAt	string	format: date-time
expiresAt	string \| null	format: date-time
id	string
last4	string	The last four characters, for telling two keys apart in a list.
lastUsedAt	string \| null	Written at most once a minute, so it is accurate to the minute and not to the request.format: date-time
name	string
prefix	string	`gsk_live_` plus the first eight characters of the secret. Enough to recognise a key; not enough to use one.
rateLimitPerDay	number \| null	A per-key daily cap. Null means uncapped by the key itself.
rateLimitPerMinute	number \| null	A per-key ceiling. Null means the rate class's own limit applies; a number can only ever lower it.
revokedAt	string \| null	format: date-time
scopes	string[]
status	string	one of: active, revoked, expired

200 OK headers
Header	Meaning
`Cache-Control`	Always `private, no-store`.

Errors

Every refusal is { error: { code, message, details?, requestId } }. Branch on code, never on the sentence. The full catalogue is at Errors.

Code	Status	When it happens	What to do
validation_failed	400	The merged path, query and body did not match the operation's schema. The schemas are strict, so an unknown field is a failure rather than something ignored, and a string carrying half of a character is refused before it can be stored.	Read `details.issues`. Each entry carries a `path`, a `message` and a machine readable `code`. Fix every named field and send the request again; the same body always fails the same way.
unauthorized	401	No credential was presented, or the key is unknown, revoked or expired, or an `X-API-Key` header carried something that is not an API key. `details.reason` says which.	Send `Authorization: Bearer gsk_live_…`. A revoked or expired key never starts working again, so issue a new one in the developer console. Put a dashboard session token in `Authorization`, never in `X-API-Key`.
forbidden_scope	403	The credential does not carry every scope the operation declares, or it is the wrong kind of credential for it. `keys.` and `assistant.` are user only and can never be called by a key.	`details.requiredScopes` and `details.missingScopes` name what is missing. A key's scopes cannot be changed after it is issued, so create a new key with them. When `details.allowedActors` is present, no key can call this operation at all.
not_found	404	No resource of that id belongs to this account. A resource that belongs to somebody else answers 404 as well, never 403.	Check the id. Do not treat this as a permissions problem.
rate_limited	429	The credential's per minute budget, the account's per minute ceiling, or a daily cap was exceeded. `details.scope` is `minute`, `day` or `account`, or `global` when the product's own daily cap on voice previews is spent.	Wait the `Retry-After` seconds and retry. `details.limit` and `details.resetAt` say what was hit and when it reopens. The `RateLimit-*` headers on every answer let a client pace itself before it gets here.
internal_error	500	An unhandled failure inside this API. The original message is logged and never answered.	Retry once, then quote `requestId` to support. A 5xx deletes the idempotency claim rather than storing it, so retrying under the same key is safe.