---
title: "Human owner/admin session; creates a scoped API credential within the creator permission ceiling and returns its secret once"
method: POST
path: "/v1/access/keys"
---

# Human owner/admin session; creates a scoped API credential within the creator permission ceiling and returns its secret once

`POST /v1/access/keys`

## Request

- Base URL: `https://app.agentlinkops.com`
- URL: `https://app.agentlinkops.com/v1/access/keys`
- Auth: HTTP bearer

Human owner/admin session; creates a scoped API credential within the creator permission ceiling and returns its secret once. Listing credentials does not return that secret.

## Headers

- `X-Workspace-ID` string, required

## Request body

- object
  - `name` string, required
  - `scopes` string[], required
  - `projectIds` string[], nullable
  - `expiresInDays` integer

## Response `201`

Human owner/admin session; creates a scoped API credential within the creator permission ceiling and returns its secret once. Listing credentials does not return that secret.

- object
  - `id` string, required
  - `token` string, required: Returned once; not recoverable through access listing.
  - `name` string, required
  - `scopes` string[], required
  - `projectIds` string[], nullable, required
  - `expires_at` string, required

## Other responses

- `429`: Request-rate or usage refusal. Inspect error.code and recovery details before retrying.
- `default`: Error envelope. Non-configuration 5xx messages are masked and details omitted; allowlisted configuration errors retain static operator recovery.

---

[API](https://skmtc.dev/agentlinkops/apis/agentlinkops-http-api.md) · [All operations](https://skmtc.dev/agentlinkops/apis/agentlinkops-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentlinkops/apis/agentlinkops-http-api/revisions/1bf30c2912b2?raw)