List KMS keys
A compact view of each key, without its material. Keys the caller may
not read are filtered out after the page is taken, so a page may
hold fewer than per_page entries without meaning the results have
ended. There is no envelope and no total; walk the pages until one comes
back empty.
Authorizations
A machine credential, qk_ followed by its secret. Only a hash of the
secret is stored, so a key is displayed exactly once, when it is created
or rotated. A key reaches only the configurations it is linked to.
It may also be sent as Authorization: Bearer qk_..., which is
recognised by the prefix.
Query Parameters
Restrict to keys owned by the configuration with this proxy slug. The caller must be able to reach that configuration.
"952zpx6vyig3sdyp"
Restrict to keys in this lifecycle state.
active, revoked 1-based page number. A missing, zero or unparseable value is the first page.
x >= 1Rows per page. A larger figure is reduced to the maximum rather than
refused. Note the default differs from the one on
GET /api/v3/classifications.
1 <= x <= 200Response
Matching keys, without their material.
How every other KMS endpoint names this key.
A caller's own identifier, for reconciling against another system.
AES, RSA The key length, without the cipher mode.
"AES-256"
"RSA-2048"
active, revoked The AES mode. Absent for an RSA key, which has none.
gcm, cbc