---
title: "Create Api Key"
method: POST
path: "/api_keys/"
tags: ["Authentication"]
---

# Create Api Key

`POST /api_keys/`

## Request

- Base URL: `https://api.chutes.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.chutes.ai/api_keys/`
- Auth: API key in header `Authorization`

Create a new API key. OAuth access tokens and existing API keys cannot mint credentials.

## Headers

- `X-Chutes-Hotkey` string, nullable
- `X-Chutes-Signature` string, nullable
- `X-Chutes-Nonce` string, nullable
- `Authorization` string, nullable

## Request body

- APIKeyArgs
  - `admin` boolean, required
  - `name` string, required
  - `scopes` ScopeArgs[], nullable
    - `object_type` string, required
    - `object_id` string, nullable
    - `action` 'read' | 'write' | 'delete' | 'invoke'

## Response `200`

Successful Response

- string

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-16** `23e8895b217d`: 8 breaking, 1 warning, 2 info
  - the response's body type changed from `object` to `string` for status `200`
  - removed the required property `admin` from the response with the `200` status
  - removed the required property `api_key_id` from the response with the `200` status
  - removed the required property `created_at` from the response with the `200` status
  - …7 more
- **2026-08-26** `8d909638091e`: 1 info
  - endpoint added
- **2026-08-22** `05d9af05d87e`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/chutes/apis/chutes-api/changes/api_keys/post.md)

---

[API](https://skmtc.dev/chutes/apis/chutes-api.md) - [All operations](https://skmtc.dev/chutes/apis/chutes-api/llms.txt) - [OpenAPI document](https://skmtc.dev/chutes/apis/chutes-api/revisions/8add5b0e22da?raw)