---
title: "Mint another API key for this account"
method: POST
path: "/v1/account/keys"
tags: ["Account"]
---

# Mint another API key for this account

`POST /v1/account/keys`

## Request

- Base URL: `https://api.galleyrender.com`
- URL: `https://api.galleyrender.com/v1/account/keys`
- Auth: HTTP bearer

Returns a new key **once**, in `api_key`. Keys are stored as a SHA-256 digest and cannot be read back by this API, by the dashboard or by support, so save it before you do anything else and do not write it to a log or a transcript.

Authenticated by a key you already hold — a live key is the proof that you are the account. Nothing is revoked by this call: deploy the new key, confirm it works, then revoke the old one with `POST /v1/account/keys/{id}/revoke`. `other_live_keys` lists the ids you might mean, including the one you authenticated with.

**No key at all?** This endpoint cannot help you — it needs one. Call `create_account` on the MCP server with the account's verified address: it mails a one-time link code, `link_account` binds this client with it, and `rotate_key` then mints a key from there.

## Request body

- object
  - `name` string: A label for this key, so two can be told apart later. Defaults to `rotated`.

## Response `201`

Minted. The plaintext key is in this response and will not be shown again.

- object
  - `object` 'api_key', required
  - `account` string
  - `id` string, uuid, required
  - `api_key` string, required
  - `key_prefix` string, required
  - `name` string
  - `created_at` string, date-time
  - `shown_once` string
  - `do_not_log_it` string
  - `other_live_keys` object[]
    - `id` string, uuid
    - `name` string
    - `key_prefix` string
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable: When the key last authenticated. Recorded only from the release after 2026-09-21; null on an older key means unknown, not unused.
    - `is_the_key_you_authenticated_with` boolean
  - `last_used_at_note` string
  - `to_finish_rotating` string

## Other responses

- `401`: `authentication_error`.

---

[API](https://skmtc.dev/galleyrender/apis/galley-render-api.md) · [All operations](https://skmtc.dev/galleyrender/apis/galley-render-api/llms.txt) · [OpenAPI document](https://skmtc.dev/galleyrender/apis/galley-render-api/revisions/a85d68468cd2?raw)