Skip to main content
POST
Create API Key
The full secret is returned only in this response — copy it now. From then on the key is stored as a hash and every other endpoint returns just prefix/last4.
Accounts can hold up to 10 keys. Past that, this endpoint answers 409 API_KEY_LIMIT_REACHED — delete an unused key first.

Body

string
required
1–40 characters.
string[]
required
At least one scope from the catalog. Presets read/write/full on the dashboard expand to these before the request is sent.
string[]
IPs or CIDRs allowed to use the key, up to 20 entries. Omitted or empty means any IP.

Response

APIApiKeyCreated
Same shape as List API Keys, plus the secret.

Errors