List your API keys (metadata only — never the raw keys)
List every developer key on the authenticated account, including revoked ones — a non-null revoked_at marks a key as dead.
List every developer key on the authenticated account, including revoked ones — a non-null revoked_at marks a key as dead.
Metadata only. Raw key values are stored hashed and are never returned by any endpoint; key_prefix is provided so you can match a row against a key you already hold. Unmetered.
Authorization
BearerAuth Your API key, sent as Authorization: Bearer wm_.... Keys are wm_ followed by 40 hex characters. Create one with POST /register (free, no auth) or POST /keys.
In: header
Response Body
application/json
application/json
application/json
application/json
curl -X GET "https://api.wellmarked.io/keys" \ -H "Authorization: Bearer wm_your_api_key_here"{ "keys": [ { "created_at": "2019-08-24T14:15:22Z", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "name": "string", "revoked_at": "2019-08-24T14:15:22Z", "scopes": [ "string" ] } ]}Self-register for a free, extract-only API key (no auth)
Mint a free API key from an email address. Public — no existing key required. This is the zero-friction entry point: an agent can go from nothing to a working key in one call.
Create a new scoped API key
Create an additional API key on the authenticated account, with its own name, scopes and compliance policy.