Create an API key
Creates a key on the team. The new key inherits the calling key’s scopes — a key can never create a stronger key than itself. If the calling key is IP-locked, the new one is locked to the same addresses (or a subset you give in allowed_ips); other addresses give 403. The plain text (key) is only in this response. A pub key only works from a browser once it has allowed_origins. Requires a live key.
Authentication
Your API key as a Bearer token.
Body
application/jsonmodeenum<string>live for servers, pub for the browser.
livepubnamestringrequiredallowed_ipsstring[]Lock the key to these IP addresses (or CIDR). Calls from other addresses get 403.
allowed_originsstring<uri>[]Origins a pub key may be called from, e.g. https://shop.dk. Without them every browser call is rejected (403).
Request
Response
The key — `key` is only shown here
idstring<uuid>keystringThe key itself in plain text. Store it now.
modeenum<string>livepubnamestringprefixstringwarningstringReminder to store the key.
created_atstring<date-time>