API keys

Create an API key

Mints a key that acts as the caller (an org admin) on the session routes. The secret is in this response only; it is never stored or shown again. Without expires_at the key never expires.

post/o/{org}/api-keys

Request

  • Base URL: https://api.prix.dev
  • URL: https://api.prix.dev/o/{org}/api-keys
  • Auth: HTTP bearer

Request body

namestring required
scopesApiKeyScope[]

Defaults to both scopes.

max_concurrentinteger

Runs this key may have in progress at once.

expires_atstring date-time nullable

In the future and at most one year away.

Response

The key, with its secret.

idstring required

key_…; use it in the key routes.

kind'key' | 'oauth'

key is minted here; oauth is an MCP client a person connected by signing in. An oauth grant reaches only the MCP server, cannot be rotated and has no webhook; its expires_at is when it ends unless the client refreshes it.

namestring required
prefixstring required

The secret's first characters, to tell keys apart.

scopesApiKeyScope[] required
max_concurrentinteger required
webhook_urlstring nullable required
expires_atstring date-time nullable required
last_used_atstring date-time nullable required
created_atstring date-time required
secretstring required

The key's secret. Only in the create and rotate responses; never shown again.

webhook_secretstring

The webhook signing secret. Only in the update response that minted it.

Changes

No recorded changes to this operation across all 2 revisions of this API.