The Scenario
Your company rotates API keys quarterly. The security engineer on your team sends the same message every three months: get me a list of every active Grafbase API key — key ID, name, and creation date — so she can identify which ones are stale and flag them for revocation.
You are the IT admin. You have been handed this request before. Last time, you spent forty minutes clicking through the Grafbase account settings, copying key metadata line by line into a workbook, and then sending it over. She found three keys that had not been rotated in eleven months.
This quarter the organization has grown. There are now 20 active keys across the account. The request came in on a Tuesday.
The bad version:
- Log into Grafbase, navigate to account settings, and open the API keys section
- Copy each key's ID, name, and creation date into a row in the Excel workbook — 20 keys, 20 manual rows, careful not to transpose any IDs
- Double-check the creation dates by toggling back to the Grafbase UI because you noticed two keys were created on the same day and you are not sure you got the right one in the right row
Twenty rows of key metadata is the kind of task that looks quick until you are halfway through and realize you have been doing it for thirty minutes and the security engineer is waiting.
Nobody should spend half an hour manually transcribing an access audit that an API call could produce in seconds.
The Easy Way: One Prompt in SheetXAI
SheetXAI is an AI agent inside your Excel workbook. It reads the workbook and pulls from Grafbase's API on your behalf — no manual navigation, no copy-pasting key IDs. Ask it once.
Fetch all access tokens from Grafbase and paste their IDs and creation timestamps into this Excel workbook for an access audit
What You Get
- One row per API key in the workbook
- Key ID in column A, name in column B, creation date in column C
- Dates written in ISO 8601 format so the security engineer can sort by age without reformatting
- If an API key has no name set, SheetXAI writes the key ID as a fallback rather than leaving a blank that collapses your sort
What If the Data Is Not Quite Ready
The workbook has keys from the previous quarter still in it and you need a clean slate before importing
Clear all rows in Sheet1 below the header row, then list all active Grafbase API keys and write key ID, name, and created date into columns A–C
The creation dates come back in a format that does not sort correctly in Excel
Fetch all Grafbase API keys, reformat the created date to YYYY-MM-DD in column C, and write key ID and name into columns A and B
You need to flag keys older than 90 days inline rather than doing it by hand afterward
List all Grafbase API keys for my account, write key ID/name/created date into columns A–C of Sheet1, then add a column D that says "Rotate" if the key was created more than 90 days ago and "Current" otherwise
Full audit in one shot: import, age flag, sort, and write a count of stale keys
Fetch all Grafbase API keys, write key ID/name/created date into columns A–C of Sheet1, add a Rotate/Current flag in column D, sort rows by created date ascending, then write the count of stale keys into cell F1 with the label "Keys to rotate"
One prompt handles the full audit deliverable. The pattern: ask for the data pull and every downstream judgment in the same request.
Try It
Open the Excel workbook you use for access reviews, then Get the 7-day free trial of SheetXAI and ask it to pull your full Grafbase API key inventory into the workbook. Also worth reading: Export Grafbase Schema Check History Into an Excel workbook and the Grafbase overview for Excel.