admin

Creates a metered API key.

post/admin/keys

Request

Base URL: https://api.mapmap.ai
URL: https://api.mapmap.ai/admin/keys
Auth: HTTP bearer

Request body

allowed_originsstring[] nullable

Origins this key may be called from, e.g. ["https://app.example.com", "https://*.staging.example.com"]. At most 20; each is scheme://host[:port] with no path, and a wildcard may only stand for a single subdomain label. Omit for an unrestricted key, the default.

monthly_quotainteger required

Requests allowed per calendar month (>= 1).

namestring required

Human-readable key name (1–120 characters).

rate_per_mininteger required

Requests allowed per minute (>= 1).

scopestring nullable

"full" (the default) or "maps", a key restricted to tiles, style/font/sprite reads, geocoding and its own status endpoints.

Response

Key created; the key field is shown once only

allowed_originsstring[] nullable

The canonical origin allow-list stored for this key, echoed back. Absent on unrestricted keys.

created_atstring required

RFC 3339 creation timestamp.

idstring required

Key id, used for revocation and usage queries.

keystring required

The full API key (snk_…). Store it now; it is never shown again, only its BLAKE3 hash is persisted.

monthly_quotainteger required

Requests allowed per calendar month.

namestring required

Key name.

rate_per_mininteger required

Requests allowed per minute.

scopestring nullable

"maps" when the key was minted map-scoped; absent for the full surface.

Changes

No recorded changes to this operation across all 1 revision of this API.