---
title: "Create Api Key"
method: POST
path: "/consent-hosting/api-keys"
tags: ["consent-hosting"]
---

# Create Api Key

`POST /consent-hosting/api-keys`

## Request

- Base URL: `https://api.openproof.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openproof.io/consent-hosting/api-keys`
- Auth: HTTP bearer

Raw key is generated here, shown ONCE in this response, and
never stored or retrievable again -- only its SHA-256 hash is
persisted, same pattern as the webhook secret above. A business
can hold multiple active keys at once (e.g. one per environment);
creating a new one does not revoke any existing key.

## Request body

- ApiKeyCreate
  - `label` string, nullable

## Response `201`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/openproof/apis/openproof-api.md) · [All operations](https://skmtc.dev/openproof/apis/openproof-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openproof/apis/openproof-api/revisions/ddd0cac7c37e?raw)