List API keys: the ones you created, or every key belonging to one merchant.

Without merchantId, you get the keys the signed-in user created. With merchantId, you get that merchant's publishable keys and merchant-pinned secret keys, whoever created them. payout_write and agent_onboarding keys are never included in the merchant view.

Each entry shows the key prefix and metadata only. Key values are never returned.

With merchantId, a merchant user may list its own merchant, a tenant owner or admin any merchant on their tenant, and Zenoz staff any merchant. Anyone else gets a 404.