---
title: "Create Api Key Route"
method: POST
path: "/account/api-keys"
tags: ["auth"]
---

# Create Api Key Route

`POST /account/api-keys`

## Request

- Base URL: `https://quredec.com` (the document declares no server; this is the origin it was published from)
- URL: `https://quredec.com/account/api-keys`
- Auth: none declared

Create a new API key. Returns the raw token EXACTLY ONCE.

The caller (account UI JS) must show this to the user immediately and
then drop it; the server will never re-disclose it.

Gated by the canary allowlist (`MCP_API_ALLOWLIST`): non-allowlisted
users get a 403 instead of an issued key, so we can't accidentally hand
out tokens that won't authenticate against the API anyway.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/quredec/apis/strategic-intelligence-engine.md) · [All operations](https://skmtc.dev/quredec/apis/strategic-intelligence-engine/llms.txt) · [OpenAPI document](https://skmtc.dev/quredec/apis/strategic-intelligence-engine/revisions/f0963bce9f11?raw)