Key Management

Authorize a member to receive an immutable organization key

An active owner/admin authorizes an exact current member. No secret is returned. Reuse request_id only with the identical payload after an uncertain response. Authorization expires after 24 hours. For rotation, the old key remains usable until the intended member successfully claims its replacement. Rotation preserves the actor and organization. To change members, revoke the old key and authorize a new key without rotate_key_id. Claim rechecks issuer and member authority under database locks.

post/keys/member

Request

  • Base URL: https://app.arkova.ai/api/v1
  • URL: https://app.arkova.ai/api/v1/keys/member
  • Auth: HTTP bearer

Request body

request_idstring uuid required

Stable request UUID; changed-payload reuse returns 409.

actor_user_idstring uuid required
namestring required
scopesstring[] required
expires_atstring date-time nullable

Optional absolute key expiry, validated at authorization and claim.

rotate_key_idstring uuid

Existing key for the same actor and organization to replace atomically at claim; creating authorization alone does not revoke it.

Response

Identical pending authorization already exists

org_idstring uuid required
issuer_user_idstring uuid required
actor_user_idstring uuid required
namestring required
scopesstring[] required
key_expires_atstring date-time nullable required
expires_atstring date-time required
state'pending' required
old_key_idstring uuid nullable required
intent_idstring uuid required
idempotentboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.