---
title: "Mint License Key"
method: POST
path: "/tenants/{tenant_id}/licenses/{app}/key"
tags: ["licenses"]
---

# Mint License Key

`POST /tenants/{tenant_id}/licenses/{app}/key`

## Request

- Base URL: `https://api.b2metric.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.b2metric.com/tenants/{tenant_id}/licenses/{app}/key`
- Auth: none declared

Mint the signed, offline licence file for a licence (SSO-40).

This is the delivery artifact for an air-gapped installation: once handed
over it verifies locally, forever, and cannot be recalled or revoked. That
makes it a one-way grant of entitlement rather than a read of one, which is
why it is a POST, platform-admin only, and audited.

## Path parameters

- `tenant_id` string, uuid, required
- `app` string, required

## Headers

- `authorization` string, nullable

## Response `200`

Successful Response

- LicenseKeyOut: A signed, offline licence file. `key` is the artifact that travels to an air-gapped installation; `kid` names the signing key so the installation can pick it out of the published JWKS. `payload` is returned decoded purely so an operator can eyeball what they are about to hand over — it is not the trusted copy, the signed bytes inside `key` are.
  - `key` string, required
  - `kid` string, required
  - `payload` object, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/b2metric/apis/b2metric-license-api.md) - [All operations](https://skmtc.dev/b2metric/apis/b2metric-license-api/llms.txt) - [OpenAPI document](https://skmtc.dev/b2metric/apis/b2metric-license-api/revisions/5c26e11e8b53?raw)