---
title: "Self-serve API key registration (agents welcome)"
method: POST
path: "/api/signup"
---

# Self-serve API key registration (agents welcome)

`POST /api/signup`

## Request

- Base URL: `https://cve-security.com`
- URL: `https://cve-security.com/api/signup`
- Auth: none declared

One POST mints a free key (1,000 requests/day). The raw key is returned once and only a hash is stored, save it immediately; it cannot be re-shown. One account per email; 3 signups per IP per day.

## Request body

- object
  - `email` string, email, required

## Response `201`

{ api_key, tier, daily_limit, warning, usage }, store api_key now

- object

## Other responses

- `400`: Invalid email or body
- `409`: Email already registered, keys cannot be re-sent; request a reissue at https://cve-security.com/contact?topic=api
- `429`: Signup cap for this IP today

---

[API](https://skmtc.dev/cve-security/apis/cve-security-api.md) · [All operations](https://skmtc.dev/cve-security/apis/cve-security-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cve-security/apis/cve-security-api/revisions/2470f9c9a4eb?raw)