diff --git a/src/backend/langflow/services/database/models/api_key/__init__.py b/src/backend/langflow/services/database/models/api_key/__init__.py
index c97425ee8..fbb8265b9 100644
--- a/src/backend/langflow/services/database/models/api_key/__init__.py
+++ b/src/backend/langflow/services/database/models/api_key/__init__.py
@@ -1,3 +1,3 @@
-from .api_key import ApiKey, ApiKeyCreate, ApiKeyRead
+from .api_key import ApiKey, ApiKeyCreate, UnmaskedApiKeyRead, ApiKeyRead
 
-__all__ = ["ApiKey", "ApiKeyCreate", "ApiKeyRead"]
+__all__ = ["ApiKey", "ApiKeyCreate", "UnmaskedApiKeyRead", "ApiKeyRead"]
diff --git a/src/backend/langflow/services/database/models/api_key/api_key.py b/src/backend/langflow/services/database/models/api_key/api_key.py
index 784b25229..1006b1c0f 100644
--- a/src/backend/langflow/services/database/models/api_key/api_key.py
+++ b/src/backend/langflow/services/database/models/api_key/api_key.py
@@ -1,24 +1,44 @@
-from sqlmodel import Field
+from pydantic import validator
+from sqlmodel import Field, Relationship
 from uuid import UUID, uuid4
-from typing import Optional
+from typing import Optional, TYPE_CHECKING
 from datetime import datetime
 from langflow.services.database.models.base import SQLModelSerializable
 
+if TYPE_CHECKING:
+    from langflow.services.database.models.user import User
+
 
 class ApiKeyBase(SQLModelSerializable):
     api_key: str = Field(index=True, unique=True)
     name: Optional[str] = Field(index=True)
-    create_at: datetime = Field(default_factory=datetime.utcnow)
+    created_at: datetime = Field(default_factory=datetime.utcnow)
     last_used_at: Optional[datetime] = Field(default=None)
+    user_id: UUID = Field()
 
 
 class ApiKey(ApiKeyBase, table=True):
     id: UUID = Field(default_factory=uuid4, primary_key=True, unique=True)
+    # User relationship
+    user_id: UUID = Field(index=True, foreign_key="user.id")
+    user: "User" = Relationship(back_populates="api_keys")
 
 
 class ApiKeyCreate(ApiKeyBase):
-    pass
+    api_key: Optional[str] = None
+    user_id: Optional[UUID] = None
+
+
+class UnmaskedApiKeyRead(ApiKeyBase):
+    id: UUID
 
 
 class ApiKeyRead(ApiKeyBase):
     id: UUID
+    api_key: Optional[str] = None
+    user_id: Optional[UUID] = None
+
+    @validator("api_key", always=True)
+    def mask_api_key(cls, v):
+        # This validator will always run, and will mask the API key
+        return f"{'*' * 8}{v[-4:]}"