api_keys

Create an API key

Creates an API key and returns its secret once. Send the secret as a Bearer token to the REST API or any Pomerado MCP.

  • A key carries only permissions you hold. It gets api_keys:manage, billing:manage or team:manage only when permissions names them.
  • It expires after 90 days unless expires_in_days says otherwise.
  • With deliver "dashboard", nothing is created yet: this returns a Dashboard link where the person creates the key and sees the secret, so it never reaches this client.
  • With purpose "connect", for the Connect page: it revokes your older unused connect keys for the same integration (or for the account) beyond three, and at your key limit your oldest unused connect key, so these keys never fill your limit. A key that has been used is never revoked this way, and you can create at most 20 connect keys an hour.
post/v1/api-keys

Request

  • Base URL: https://api.pomerado.ai
  • URL: https://api.pomerado.ai/v1/api-keys
  • Auth: HTTP bearer

Request body

namestring required

1 to 100 characters, without leading or trailing spaces

permissionsstring[]

Permissions the key carries, each one you hold. Default: all you hold except api_keys:manage, billing:manage and team:manage

integration_idstring

an integration ID: int_ and 32 lowercase hex digits

expires_in_daysinteger

an integer

deliver'dashboard'

Return a Dashboard link instead of the secret, so the secret never reaches this client

purpose'connect'

connect: a key the Connect page makes for an agent. Creating one revokes your older unused connect keys for the same integration (or for the account) beyond three, and at your key limit your oldest unused connect key; a key that has been used is never revoked this way. At most 20 connect keys an hour.

Example request

{
  "name": "Nightly price check",
  "permissions": [
    "tools:read",
    "runs:create",
    "jobs:read"
  ],
  "integration_id": "int_0f8e2d1c4b3a49e8a7f6e5d4c3b2a190"
}

Response

With deliver dashboard: where to finish

dashboard_urlstring required

A signed-in Dashboard page where the person finishes this and sees the secret once

Changes

No recorded changes to this operation across all 1 revision of this API.