def get(id, timeout: nil)def get: (String id, ?timeout: seconds?) -> key_resourceReturns a single key. Read it before you revoke something you believe is unused: active tells you whether it is currently enabled, scopes is the effective map after clamping rather than what was requested, projectIds is the project fence, and lastUsedAt is the only evidence of live traffic.
id is the key id from a list call or from create. It is not the prefix and not the secret, and keys have no slug form, so a prefix passed here produces a 404 rather than a validation error.
The secret is never returned, on this route or any other. If the plaintext is lost the key is unrecoverable and the only path forward is to create a replacement and delete this one.
Example
require "envless/sdk"
key = Envless.keys.get("0191f3c2-8a71-7c3e-9b2d-4f5a6c7d8e90")
puts "#{key[:scopes]} #{key[:projectIds]} #{key[:lastUsedAt]}"Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
id | String | Yes | The key id, ids only, no prefix and no slug form. |
timeout: | Integer | Float | Rational | No | Seconds each attempt of this call may take, redirects and the response body included, before it raises Envless::NetworkError with timeout? set. Overrides the client's timeout for this call, and 0 turns the limit off. |
Returns
key_resource with prefix, effective scopes, projectIds, active and lastUsedAt.
Worth knowing
- A key that
deletehas already revoked returns 404key.not_found, so a 404 here is a reliable revoked signal. lastUsedAtisnilfor a key that has never authenticated a request.
Required scopes
keys:read
Underlying endpoint
GET /keys/{id}
Request and response schema, every error code, and a live playground.
In TypeScript
envless.keys.get()
The same method in @goenvless/sdk, with the same request, retries and errors.