We have an issue where we get emails from our internal Cybersecurity team 90 days after creating a MongoDB Atlas API key for rotation purposes.

For other SaaS providers we're able to stay ahead of those emails by querying their APIs and getting the date at which an API key will expire or the date after 90 days of when it has been created. This allows us to rotate keys before emails from Cyber.

The Mongo Atlas Administration API doesn't seem to provide that capability with the Programmatic access endpoints (though I am able to see the CreatedAt date in the UI). It would be great if this field could be returned in the response body for those endpoints.

Endpoints:
https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/#tag/Programmatic-API-Keys

Existing forum issue:
https://www.mongodb.com/community/forums/t/get-org-api-key-creation-date/270594

Related feedback ideas:
https://feedback.mongodb.com/forums/924145-atlas/suggestions/48729215-improve-admin-api-for-api-keys-rotation
https://feedback.mongodb.com/forums/924145-atlas/suggestions/43396818-api-key-expiration-date