---
title: "Create API key"
method: POST
path: "/api-keys"
tags: ["API Keys"]
---

# Create API key

`POST /api-keys`

Creates a new API key scoped to the current organization. The full key value is returned **only once** — store it securely, as it cannot be retrieved again.

## Request body

- object
  - `name` string — Descriptive name for the key (defaults to 'API Key')
  - `expiresIn` integer — Expiration in seconds (e.g., 2592000 = 30 days). Omit for no expiry.

## Response `201`

API key created successfully

- object
  - `data` object, required
    - `id` string, required
    - `name` string, required
    - `prefix` string, required — Key prefix (rb_xxx)
    - `enabled` boolean, required — False when the key is disabled (soft-revoked)
    - `createdAt` integer, required — Unix ms
    - `lastUsedAt` integer, nullable, required
    - `expiresAt` integer, nullable, required
    - `key` string, required — Full API key value (rb_xxx...). Only returned once!

## Other responses

- `401` — Unauthorized

## Changes

- **2026-08-29** `4d10ec4266ee` — 1 info
  - api operation id `createApiKey` was added

[Change history](https://skmtc.dev/rendobar/apis/rendobar-api/changes/api-keys/post.md)

---

[API](https://skmtc.dev/rendobar/apis/rendobar-api.md) · [All operations](https://skmtc.dev/rendobar/apis/rendobar-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rendobar/rendobar-api/revisions/7921b988a66f/schema)