service-accounts

Create API Key

Mints an env3_ key OWNED BY the service account, created_by the caller. The plaintext appears in this response only. scope is capped at the caller's own credential scope (403 insufficient_scope otherwise), same ceiling rule POST /api-keys applies to a self-minted key.

post/service-accounts/{id}/api-keys

Request

  • Base URL: https://api.instruxi.dev/api/v1/enforcer
  • URL: https://api.instruxi.dev/api/v1/enforcer/service-accounts/{id}/api-keys
  • Auth: one of:
    • API key in header Authorization
    • API key in header X-API-Key

Path parameters

idstring required

id

Request body

expires_atstring date-time
namestring
scopestring

Example request

{
  "scope": "enforcer:read"
}

Response

Created

successboolean

Example response

{
  "data": {
    "key": "env3_AbCdEf…"
  },
  "success": true
}

Changes

No recorded changes to this operation across all 1 revision of this API.