API Keys

Mint an API key. The raw key is returned ONCE.

post/api/v1/keys

Request

  • Base URL: https://qrlia.dev.castlesoft.eu
  • URL: https://qrlia.dev.castlesoft.eu/api/v1/keys
  • Auth: API key in cookie qrc_session

Request body

namestring required

Human label for the key — shown in /settings.

scope'tenant' | 'company' required

tenant keys see all companies in the tenant. company keys are pinned to one company.

companyIdstring uuid

Required when scope='company'; forbidden when scope='tenant'.

Response

Created

idstring uuid required
namestring required
prefixstring required

Visible 12-char prefix (e.g. qrc_abc123_…). The full key is shown ONCE on creation.

companyIdstring uuid nullable required
createdAtstring date-time required
lastUsedAtstring date-time nullable required
revokedAtstring date-time nullable required
keystring required

The raw API key. Shown ONCE — store securely. Format: qrc_<prefix>_<rand>.

Changes

No recorded changes to this operation across all 1 revision of this API.