API key management for programmatic access.
Create Master Key
Create a platform-wide master API key.
Super admin only. Master keys have full platform access.
⚠️ The secret is only shown once - save it securely!
Create Master Key › Request Body
namekey_typeType of API key.
scopesUse preset: read_only, standard, full_access
rate_limit_per_minuteIP whitelist
Create Master Key › Responses
Successful Response
idnamekey_typeType of API key.
prefixKey prefix for identification (first 8 chars)
scopescreated_atis_activerate_limit_per_minutecreated_bykeyFull API key (only shown once)
List API Keys (Legacy)
List all API keys for current organization.
Admin only. Super admins can specify organization_id to view any org's keys.
query Parameters
include_revokedorganization_idTarget org ID (super admin only)
List API Keys (Legacy) › Responses
Successful Response
Metadata for API key list responses.
Create API Key (Legacy)
Create an organization-scoped API key.
Admin only. Keys are scoped to the current organization. Super admins can specify organization_id to create keys for any org.
Scope presets:
- read_only: Read access to all resources
- standard: Read/write/execute (no admin)
- full_access: All scopes including admin
⚠️ The secret is only shown once - save it securely!
query Parameters
organization_idTarget org ID (super admin only)
Create API Key (Legacy) › Request Body
namekey_typeType of API key.
scopesUse preset: read_only, standard, full_access
rate_limit_per_minuteIP whitelist
Create API Key (Legacy) › Responses
Successful Response
idnamekey_typeType of API key.
prefixKey prefix for identification (first 8 chars)
scopescreated_atis_activerate_limit_per_minutecreated_bykeyFull API key (only shown once)
List API Keys
List all API keys for current organization.
Admin only. Super admins can specify organization_id to view any org's keys.
query Parameters
include_revokedorganization_idTarget org ID (super admin only)
List API Keys › Responses
Successful Response
Metadata for API key list responses.
Create API Key
Create an organization-scoped API key.
Admin only. Keys are scoped to the current organization. Super admins can specify organization_id to create keys for any org.
Scope presets:
- read_only: Read access to all resources
- standard: Read/write/execute (no admin)
- full_access: All scopes including admin
⚠️ The secret is only shown once - save it securely!
query Parameters
organization_idTarget org ID (super admin only)
Create API Key › Request Body
namekey_typeType of API key.
scopesUse preset: read_only, standard, full_access
rate_limit_per_minuteIP whitelist
Create API Key › Responses
Successful Response
idnamekey_typeType of API key.
prefixKey prefix for identification (first 8 chars)
scopescreated_atis_activerate_limit_per_minutecreated_bykeyFull API key (only shown once)
Rotate API Key
Rotate an API key with grace period.
Creates a new key and sets the old key to expire after the grace period. This allows time to update systems using the old key.
Args: key_id: ID of key to rotate grace_period_hours: Hours to keep old key valid (1-168, default 24)
⚠️ The new secret is only shown once - save it securely!
path Parameters
key_idquery Parameters
grace_period_hoursRotate API Key › Responses
Successful Response
old_key_idAPI key response with secret (only on creation).
grace_period_endsOld key remains valid until this time
