Skip to main content
POST
Mints a new API key. The full plaintext key is returned in the response EXACTLY ONCE. The caller must capture and store it immediately -- there is no way to retrieve it later.

Authorizations

Authorization
string
header
required

JWT Bearer token. Obtain via the OAuth 2.0 token endpoint.

Body

Name (required) and optional ExpiresAt.

Inbound payload for POST /api/admin/api-key.

name
string

Human-readable name. e.g. "CI deploy bot".

expiresAt
null | string<date-time>

Optional expiry. Null means no expiry.

Response

Key minted. Capture the RawKey field NOW.