How do I know if an API key is still being used?

If you're an administrator, you can see when each API key was last used and which endpoint it accessed. This makes it easier to identify unused or potentially unnecessary keys, without exposing the key itself.

On the Setup > Users > Users tab, open the profile of a specific user. For each of their API keys, the Last Accessed field shows when the key was last used, and the Last Endpoint Accessed field shows which endpoint it was used to call. For keys that existed before this feature, these fields show only usage from when tracking began, not earlier activity.

To review keys across all your users at once, add the API Key Name and API Key Last Used columns to a report built on the Users data source. You can report on key names for both new and existing keys.