---
title: "Provision an API key"
method: POST
path: "/auth/provision"
tags: ["Authentication"]
---

# Provision an API key

`POST /auth/provision`

## Request

- Base URL: `https://riskmodels.app/api`
- URL: `https://riskmodels.app/api/auth/provision`
- Auth: HTTP bearer

Exchange a valid session JWT for a long-lived Bearer API key in format `rm_agent_{live|test}_{random}_{checksum}`. Intended for AI agents that need a stable key for repeated calls.

## Response `200`

New API key provisioned.

- object
  - `api_key` string
  - `environment` 'live' | 'test'
  - `created_at` string, date-time

## Other responses

- `401`: Missing or invalid session JWT.

---

[API](https://skmtc.dev/riskmodels/apis/riskmodels-api.md) · [All operations](https://skmtc.dev/riskmodels/apis/riskmodels-api/llms.txt) · [OpenAPI document](https://skmtc.dev/riskmodels/apis/riskmodels-api/revisions/1a034cad408a?raw)