Returns retained key metadata across this workspace with SQL cursor pagination, including workspace-managed and user-owned keys of all scopes and retained deactivated keys. Credentials and permission payloads are excluded. Stack/member/user identity filters select stored response references, not effective access. Null or unavailable references never match these filters, including negative comparisons. Identity arrays must be nonempty; these fields are not sortable. GET /v2/api-key separately describes the calling key and its current effective permissions. Requires workspace-level API access view permission.