Overview

API Keys

Manage the keys that sign your requests. The secret is returned once at creation and is never retrievable again. Keys carry fine-grained scopes, an optional source IP allowlist and an optional expiry; a key can only grant scopes it holds itself. The signing recipe and the auth error catalogue are in the Authentication guide.

Operations

GET

/api-keys

POST

/api-keys

DELETE

/api-keys/{id}