---
title: "Create"
method: POST
path: "/api/v1/iam/model_api_keys"
tags: ["Model API Key"]
---

# Create

`POST /api/v1/iam/model_api_keys`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/iam/model_api_keys`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

Create generates a new model API key for the caller.

## Request body

- C1ApiIamV1ModelAPIKeyServiceCreateRequest: The ModelAPIKeyServiceCreateRequest message. This message contains a oneof named credential_format. Only a single field of the following list may be set at a time: - anthropic
  - `anthropic` C1ApiIamV1AnthropicCredentialFormat: AnthropicCredentialFormat selects the Anthropic-compatible key family. It has no options yet.
  - `appId` string: The app this key will access.
  - `displayName` string: Human-readable name for this key.
  - `edgeId` string: The Edge inference route for API calls with this key.
  - `expiresTime` string, date-time, nullable
  - `scopeCeiling` string[], nullable: Maximum scopes this key may use (must be subset of caller's grants and catalog).

## Response `200`

Successful response

- C1ApiIamV1ModelAPIKeyServiceCreateResponse: The ModelAPIKeyServiceCreateResponse message.
  - `bearerToken` string: The complete Bearer token for LLM API calls (only returned on Create, one-time reveal). Format: c1llm_{27-char-id}_{base64url-secret} This is the full authentication credential; store it securely and do not request it again.
  - `inferenceBaseUrl` string: The inference origin clients use as the API base URL. The key binding selects the Edge.
  - `key` C1ApiIamV1ModelAPIKey: ModelAPIKey is returned by Get/List operations (metadata only, no secret). This message contains a oneof named credential_format. Only a single field of the following list may be set at a time: - anthropic
    - `anthropic` C1ApiIamV1AnthropicCredentialFormat: AnthropicCredentialFormat selects the Anthropic-compatible key family. It has no options yet.
    - `appId` string: The app this key is bound to.
    - `createdAt` string, date-time, nullable
    - `deletedAt` string, date-time, nullable
    - `displayName` string: The human-readable display name for this key.
    - `edgeId` string: The Edge inference route this key is bound to.
    - `expiresTime` string, date-time, nullable
    - `id` string: The unique ID of the model API key.
    - `lastUsedAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
    - `scopeCeiling` string[], nullable: The maximum scopes this key may use (intersection with live grants).
    - `updatedAt` string, date-time, nullable
  - `resourceUri` string: The OAuth resource indicator for the Edge bound to this key.

## Changes

- **2026-10-20** `fe943bedf41b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/iam/model_api_keys/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)