Typed access
ApiKey operations are reached via client.Api.Admin.ApiKey on EksoClient.
Operations
| Method | Route | Summary |
|---|---|---|
GET | /api/admin/api-key | Lists all API keys for the current tenant (most recently created first). Hashes are stripped from the returned records; only the display prefix and metadata are visible. |
POST | /api/admin/api-key | Mints a new API key. The full plaintext key is returned in the response EXACTLY ONCE. The caller must capture and store it immediately — there is no way to retrieve it later. |
DELETE | /api/admin/api-key/{id} | Revokes an API key. Soft-delete — the row is preserved for audit; the key stops working immediately. Idempotent: revoking an already-revoked key is a no-op. |