API Keys

Create Organization Api Key

Create an API key delegated from the calling credential.

The new key can never exceed the caller's own grant: its scopes, personal/service kind, and project scope are all constrained to the caller. Creation is audit-logged by the service layer.

Omitting project_id makes an organization-wide key. One may carry a project-bound scope (project:gateway_proxy, project:read_otlp, project:write_otlp) only alongside organization:create_api_key, and then only to pass on: it resolves no project, so it can grant the scope to the project keys it creates but never use it. The one exception is project:read_otlp beside project:read, which lets the key query every readable project through the MCP server. Any other pairing is rejected with 422.

post/v1/api-keys/

Request

Base URL
https://logfire-api.pydantic.dev/api
Auth
OAuth 2
Authorization codeapi/oauth/authorize
Token URL/api/oauth/token
Scopesorganization:create_api_key
TypeScript
https://skmtc.dev/pydantic/apis/pydantic-logfire-api/docs/v1/api-keys/post.ts
A function with typed inputs. Its response is checked against the schema.

Request body

namestring required

scopesOAuthScopeId[] required

descriptionstring nullable

project_idstring uuid nullable

expires_atstring date-time nullable

Example request

{
  "scopes": [
    "organization:read_api_key"
  ]
}

Response

Successful Response

tokenstring required

Changes

No recorded changes to this operation across all 1 revision of this API.