Organizations

Create organization API key

Mint an org-billed API key. Owners and admins may request any scope set. Members may create an org key ONLY when scopes is exactly ["gateway"] (a gateway-only key that cannot call mnemom-api routes); a member must pass that scope set explicitly, and any other scope set (including the omitted-scopes default) returns 403. Viewers and auditors cannot create org keys. The key is billed to the org (for personal orgs with no billing account, a member-created key bills to the org owner's personal account) and records the caller as its creator.

post/orgs/{org_id}/api-keys

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/orgs/{org_id}/api-keys
  • Auth: HTTP bearer

Path parameters

org_idstring required

Organization identifier (e.g. org-abc12345)

Request body

namestring

Friendly name for the key (e.g., "ci-prod").

scopesApiKeyScope[]

Capability set for this org key (ADR-049). If omitted, the API substitutes the default. For owner/admin callers admin:org is implicit-eligible; admin:platform still requires Mnemom-staff role. Member callers must send exactly ["gateway"].

Response

Org API key created

key_idstring
keystring

Full secret key, only returned on creation

key_prefixstring
namestring
org_idstring nullable
scopesApiKeyScope[]

Capabilities granted to this key. Default for new keys is ["gateway", "api:read", "api:write"]. Admin scopes (admin:org, admin:platform) are opt-in and gated by the requester's role at mint time. See API Keys → Scope vocabulary.

created_atstring date-time
last_used_atstring date-time nullable

Changes

No recorded changes to this operation across all 1 revision of this API.