# Get the API Key

Your tenant's API key in full, the value your server sends as `x-tenant-api-key`. For the Owner, Admin, Non-signing Admin and Security Admin roles.

## Overview

- `apiKey` is `ak_live_` and 64 hex characters. `apiKeyPrefix` is its first 8 characters.
- The rest of the answer is your tenant, as [Get Your Tenant](https://docs.aureahub.com/docs/tenant-info.md) describes it, and four fields answered only when set: `type` — what your organisation is: `bank`, `fintech`, `merchant`, `wallet_app`, `exchange` or `other` —, `country` (ISO 3166-1 alpha-2, upper case, e.g. `IT`), `supportEmail` (the support address your users are given) and `onboardingState` (`not_started`, `in_progress` or `completed`: your onboarding with Aurea, as Aurea records it). Treat a missing field as not set.
- The key names your tenant; it is not a secret on its own, but keep it with your server's configuration. The secret that signs requests has its own route: [Get the API Secret](https://docs.aureahub.com/docs/admin-tenants-secret.md). Both together: [Credentials & Rotation](https://docs.aureahub.com/docs/guide-credentials.md).

## Endpoint

### `GET /v1/admin/tenants/{id}/api-key`

Authentication: bearer token required.

Returns the tenant's full API key.

**Path parameters**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | string | yes | Your tenant's id |

**Responses**

`200` OK

```json
{
  "id": "3f1c9a52-6d1e-4c1b-9f0a-2a51e1c0b7d4",
  "name": "Acme Wallet",
  "apiKeyPrefix": "ak_live_",
  "configuration": { "walletMode": "custodial" },
  "status": "active",
  "logoUrl": null,
  "createdAt": "2026-03-02T09:14:07.000Z",
  "updatedAt": "2026-10-14T08:02:51.000Z",
  "apiKey": "ak_live_EXAMPLE000000000000000000000000000000000000000000000000000000001"
}
```

`403` Forbidden

```json
{
  "error": "ForbiddenError",
  "message": "Admin access required or you can only access your own tenant."
}
```

**Example request**

```bash
curl https://api.aureahub.com/v1/admin/tenants/TENANT_ID/api-key \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#admin-tenants-apikey