diff --git a/output/openapi/elasticsearch-serverless-openapi.json b/output/openapi/elasticsearch-serverless-openapi.json
index bb5ca73e07..3ffcbb3d11 100644
--- a/output/openapi/elasticsearch-serverless-openapi.json
+++ b/output/openapi/elasticsearch-serverless-openapi.json
@@ -15605,6 +15605,16 @@
               "type": "boolean"
             },
             "style": "form"
+          },
+          {
+            "in": "query",
+            "name": "active_only",
+            "description": "A boolean flag that can be used to query API keys that are currently active. An API key is considered active if it is neither invalidated, nor expired at query time. You can specify this together with other parameters such as `owner` or `name`. If `active_only` is false, the response will include both active and inactive (expired or invalidated) keys.",
+            "deprecated": false,
+            "schema": {
+              "type": "boolean"
+            },
+            "style": "form"
           }
         ],
         "responses": {
diff --git a/output/schema/schema.json b/output/schema/schema.json
index c0cbfc318f..9e994b62af 100644
--- a/output/schema/schema.json
+++ b/output/schema/schema.json
@@ -174950,9 +174950,29 @@
               "namespace": "_builtins"
             }
           }
+        },
+        {
+          "availability": {
+            "serverless": {},
+            "stack": {
+              "since": "8.10.0"
+            }
+          },
+          "description": "A boolean flag that can be used to query API keys that are currently active. An API key is considered active if it is neither invalidated, nor expired at query time. You can specify this together with other parameters such as `owner` or `name`. If `active_only` is false, the response will include both active and inactive (expired or invalidated) keys.",
+          "name": "active_only",
+          "required": false,
+          "serverDefault": false,
+          "since": "8.10.0",
+          "type": {
+            "kind": "instance_of",
+            "type": {
+              "name": "boolean",
+              "namespace": "_builtins"
+            }
+          }
         }
       ],
-      "specLocation": "security/get_api_key/SecurityGetApiKeyRequest.ts#L23-L72"
+      "specLocation": "security/get_api_key/SecurityGetApiKeyRequest.ts#L23-L79"
     },
     {
       "body": {
diff --git a/output/schema/validation-errors.json b/output/schema/validation-errors.json
index c894b6ea49..06f921e197 100644
--- a/output/schema/validation-errors.json
+++ b/output/schema/validation-errors.json
@@ -1258,6 +1258,12 @@
         "response definition security.enable_user_profile:Response / body / instance_of - Non-leaf type cannot be used here: '_types:AcknowledgedResponseBase'"
       ]
     },
+    "security.get_api_key": {
+      "request": [
+        "Request: query parameter 'active_only' does not exist in the json spec"
+      ],
+      "response": []
+    },
     "security.get_settings": {
       "request": [
         "Missing request & response"
diff --git a/output/typescript/types.ts b/output/typescript/types.ts
index 3e949e4ff1..041a210e1e 100644
--- a/output/typescript/types.ts
+++ b/output/typescript/types.ts
@@ -16482,6 +16482,7 @@ export interface SecurityGetApiKeyRequest extends RequestBase {
   realm_name?: Name
   username?: Username
   with_limited_by?: boolean
+  active_only?: boolean
 }
 
 export interface SecurityGetApiKeyResponse {