GET /keys

List your API keys

List your API keys.

operationId: fetchApiKeys

Declared server: https://api.testnet.nexus.xyz/v1. See Networks.

Not reachable through CCXT. Session/credential lifecycle. CCXT takes credentials as constructor config; it never mints them.

Authentication: bearerAuth.

List your API keys

get

/keys

Returns key IDs and tiers for all keys owned by the authenticated wallet. Secrets are not included. Scoped to the network serving this request: keys minted on another network are not listed here, and their absence is not evidence that they were deleted or that they are inactive on the network that minted them.

Authorizations

AuthorizationstringRequired

Session token from POST /auth/login. Used only for API key management (/keys endpoints). Session tokens are network-scoped exactly like API keys: a token from one network's POST /auth/login is not valid on another, so sign in and manage keys on the same host you intend to trade against.

Responses

200

The session's API keys.

application/json

An API key as GET /keys lists it. Carries no secret: the secret exists only in the CreateKeyResponse returned at creation.

key_idstringRequired

Public key identifier, nx_ + 16 lowercase hex characters.

Example: nx_a1b2c3d4e5f67890

tierstring · enumRequired

Rate-limit tier of an API key or account override. Exactly three values, PascalCase on the wire.

Pro is what any owner with no override resolves to. MarketMaker carries the market-making allowance. Unlimited is for gateway/proxy keys that multiplex many users and is exempt from per-key rate limiting — it is a value a client can really receive, so a two-value union over Pro and MarketMaker is wrong.

PUT /admin/tiers ACCEPTS a laxer input vocabulary than this (pro, market_maker, marketmaker and unlimited all parse), but every response normalizes to the three values above.

Possible values:

labelstring · nullableRequired

Caller-supplied label from POST /keys, or null for a key created without one. Nullable, not optional — the field is always present, so read null rather than branching on a missing key.

created_at_msinteger · int64Required

Unix epoch timestamp in milliseconds.

expires_at_msinteger · nullableRequired

Unix ms after which this key stops authenticating, or null if it never expires. Nullable, not optional — the field is always present, so read null rather than branching on a missing key. Set from POST /keys's optional ttl_ms; enforced for Postgres-backed keys, the only backend live today.

401

Valid session token required

get/keys

GET /v1/keys HTTP/1.1
Host: api.testnet.nexus.xyz
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

[
  {
    "key_id": "nx_a1b2c3d4e5f67890",
    "tier": "Pro",
    "label": "my trading bot",
    "created_at_ms": 1757350000000
  },
  {
    "key_id": "nx_0f1e2d3c4b5a6978",
    "tier": "Pro",
    "label": null,
    "created_at_ms": 1757360000000
  }
]

---

_{API version 0.9.131}