Skip to main content
POST
Create a management key

Authorizations

Authorization
string
header
required

A management key (created from the organization dashboard or with POST /v3/manage/auth-keys), sent as Authorization: Bearer <management_key>. Inference API keys (sk-eden...) are not accepted on these endpoints.

Body

Settings for a new management key: a display name, the scopes it grants, and an optional expire_time (omit it for a key that does not expire). manage:read and manage:write can be combined; manage:mint is exclusive and can only be granted from the dashboard.

name
string
required
Required string length: 1 - 200
scopes
enum<string>[]
required
  • manage:read - Read organization members, keys and usage
  • manage:write - Create, update and revoke keys and members
  • manage:mint - Issue new worker management keys (issuer key)
Available options:
manage:read,
manage:write,
manage:mint
expire_time
string<date-time> | null

Response

201 - application/json

A freshly created management key. secret is the full key value, shown only in this response; store it securely.

key_id
string<uuid>
required
name
string
required
scopes
enum<string>[]
required
  • manage:read - Read organization members, keys and usage
  • manage:write - Create, update and revoke keys and members
  • manage:mint - Issue new worker management keys (issuer key)
Available options:
manage:read,
manage:write,
manage:mint
secret
string
required
masked
string
required
expires_at
string<date-time> | null
required