Auth & Key Management

Issue a key. Default scope read-only + 1yr expiry; pass scopes:["write"] for full. Raw key returned once.

Issue a key. Default scope read-only + 1yr expiry; pass scopes:["write"] for full. Raw key returned once.

post/api-keys

Request

  • Base URL: https://api-dev.fusehealth.com
  • URL: https://api-dev.fusehealth.com/api-keys
  • Auth: HTTP bearer

Request body

namestring
kind'secret' | 'publishable'

"secret" (default) — server-side management key, governed by scopes. "publishable" — fuse_pk_… key for the browser; may call ONLY POST /api/v1/checkout/sessions (everything else answers 403 KEY_KIND_NOT_ALLOWED). scopes are ignored for a publishable key and forced to read+write so that one route passes requireWrite.

scopesstring[]
expiresAtstring date-time

Omit for the 1-year default; null opts out of expiry; a past date is 400.

Response

Success — data.apiKey is the raw key, returned exactly once; data.kind echoes the key type.

successboolean
messagestring
dataunknown

Changes

No recorded changes to this operation across all 1 revision of this API.