---
title: "Create service API key"
method: POST
path: "/v1/admin/service-keys"
tags: ["admin"]
---

# Create service API key

`POST /v1/admin/service-keys`

## Request

- Base URL: `https://api.patricia.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.patricia.app/v1/admin/service-keys`
- Auth: HTTP bearer

Mint a platform-level service API key. The plaintext key is returned once and cannot be retrieved again. ``expires_at`` is required (service credentials must expire). Admin-user only: a service key cannot mint service keys.

## Request body

- ModelsServiceApiKeyServiceApiKeyCreateValidator: POST body. Key material is server-assigned; ``expires_at`` is REQUIRED.
  - `name` string, required
  - `expires_at` string, date-time, required

## Response `201`

The created key, including the one-time plaintext.

- ModelsServiceApiKeyServiceApiKeyCreatedValidator: POST response: carries the one-time plaintext key.
  - `id` string, uuid, required
  - `name` string, required
  - `key_prefix` string, required
  - `disabled_at` string, date-time, nullable
  - `expires_at` string, date-time, required
  - `last_used_at` string, date-time, nullable
  - `created_by` string, uuid, nullable
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `plaintext_key` string, required

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden. Inspect response body `code` for the specific reason (for example: PERMISSION_DENIED, EMAIL_NOT_VERIFIED, TENANT_ACCESS_REQUIRED, ROLE_UNRESOLVED)
- `409`: Conflict
- `422`: Validation error

---

[API](https://skmtc.dev/patricia/apis/patricia-api.md) · [All operations](https://skmtc.dev/patricia/apis/patricia-api/llms.txt) · [OpenAPI document](https://skmtc.dev/patricia/apis/patricia-api/revisions/0dfb44495ea1?raw)