---
title: "Create an API key"
method: POST
path: "/api-keys"
tags: ["ApiKeys"]
---

# Create an API key

`POST /api-keys`

## Request

- Base URL: `https://api.supersendtx.com`
- URL: `https://api.supersendtx.com/api-keys`
- Auth: HTTP bearer

## Request body

- CreateApiKeyRequest
  - `name` string
  - `scope` 'full' | 'sending': `full` reaches every operation. `sending` is for an app's server: sending and reading its own email (`/emails`, `/emails/batch`, cancel, reschedule, resend), `GET /deliverability`, `POST /events` and `POST /conversions`. It cannot read contacts, lists or conversions, or manage domains, webhooks, templates, automations, suppressions, integrations or keys (403 `forbidden`).

## Response `200`

API key created (token shown once)

- CreateApiKeyResponse
  - `id` string, required
  - `name` string, required
  - `scope` 'full' | 'sending', required
  - `prefix` string, required
  - `token` string, required: Full API key (`stx_…`), shown once at creation
  - `created_at` string, date-time, required

## Other responses

- `401`: Missing or invalid API key

---

[API](https://skmtc.dev/ranla/apis/supersend-tx-api.md) · [All operations](https://skmtc.dev/ranla/apis/supersend-tx-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ranla/apis/supersend-tx-api/revisions/e3e782652f50?raw)