Account

Exchange a one-time pairing code for a scoped API key

Device pairing, so a CLI or MCP client never has to have an API secret pasted into it. The customer generates a short single-use code in the clientarea; the tool posts it here and receives a freshly minted key and secret, scoped and time-limited.

Unauthenticated by necessity — the code IS the credential — and therefore throttled per IP. Codes are single-use and expire in minutes; a spent or stale code returns 400. The minted key carries a finite expires_at, so a leaked paired credential ages out by itself.

post/mcp/pair

Request

Base URL: https://api.imprezahost.com/v1
URL: https://api.imprezahost.com/v1/mcp/pair
Auth: none required

Request body

codestring required

The pairing code shown in the clientarea. Single-use.

labelstring

Which tool is pairing, shown to the customer in their key list.

Example request

{
  "label": "claude-code"
}

Response

Key minted. The secret is shown once.

successboolean

Example response

{
  "success": true,
  "meta": {
    "request_id": "req_a1b2c3d4e5f6g7h8",
    "timestamp": "2026-03-30T14:05:00Z"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.