---
title: "Generate (or regenerate) the default agent API key"
method: POST
path: "/default-api-key/generate"
tags: ["user"]
---

# Generate (or regenerate) the default agent API key

`POST /default-api-key/generate`

Issue the default `tk_xxx` agent key bound to the default toolkit.

**First call** — unauthenticated, subnet-restricted:
- Available only before the key has been claimed
- Only accessible from trusted subnets (RFC 1918 + loopback by default;
  configure via `JENTIC_TRUSTED_SUBNETS` env var)
- Returns the key **once only** — it is not recoverable after this response
- After this call, the endpoint requires a human session

**Subsequent calls** — human session required:
- Revokes the current default key
- Issues and returns a fresh key

The key works immediately — you do not need to wait for the admin account
to be created before using it.

## Response `201`

Successful Response

- unknown

## Changes

- **2026-04-13** `76e8f6063728` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/default-api-key/generate/post.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/bd463fcefb14/schema)