bfvk- secret is never returned after the initial POST /api/api-keys response; only the prefix and usage stats appear here.
Method: GET Path: /api/api-keys Auth: Session Bearer
Response
Array of key metadata.string
Stable key identifier.
string
Human-readable name.
string
First few characters of the key (for example
bfvk-XXXX).string
ISO 8601 timestamp.
string
ISO 8601 timestamp or
null if never used.