List API keys
**Dashboard-session only** — this operation does not accept `bk_` Bearer auth (see the `clerkSession` security scheme). Requires capability `apikey:manage` (Admin role). Never returns the secret.
/api/keysA signed-in Clerk dashboard session (browser cookie), not a bk_ API key. /api/keys deliberately rejects Bearer auth on every operation — a key must never be able to mint or revoke keys — so API-key management is reachable only from the Stet dashboard, not programmatically. Documented here for completeness.
In: cookie
Response Body
curl -X GET "https://app.stethq.com/api/keys"[
{
"id": "string",
"label": "string",
"prefix": "string",
"scope": "read",
"lastUsedAt": "2019-08-24T14:15:22Z",
"createdAt": "2019-08-24T14:15:22Z",
"revokedAt": "2019-08-24T14:15:22Z"
}
]{
"type": "http://example.com",
"title": "string",
"status": 0,
"detail": "string",
"instance": "string"
}Invite Stet's bot to channels
Requires `write` (`channel:manage`). Uses `conversations.join` — only works for public channels the bot can self-join. Per-channel errors are captured, not thrown, so a partial batch still reports every outcome.
List saved audiences
Saved (kind=saved) audiences only — one-time groups never appear here.