API keys

Create a developer API key

Mints a key and returns the raw secret exactly once, with ready-to-run examples. A key can never carry more than the person minting it already holds, so we check each requested scope against the caller's permissions in every target workspace. Capability and data-sensitivity tiers default to least privilege when you leave them out.

Session-only. This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

post/api/settings/developer/api-keys

Request

  • Base URL: https://api.setluca.com
  • URL: https://api.setluca.com/api/settings/developer/api-keys
  • Auth: API key in cookie luca.session_token

Headers

Luca-API-Version'1'

The major version of the API this client was built against. Omit it and the request is served by the current major version. Any other value is refused with 400 unsupported_api_version.

Request body

namestring required
scopesstring[] required
workspaceMode'current' | 'selected' | 'all'
workspaceIdsstring[]
expiresInDaysinteger nullable
rateLimitMaxinteger
capabilityTier'read' | 'draft' | 'queue_ops' | 'full'
dataSensitivityTier'redacted' | 'full_content'

Response

ok

keystring required

Changes

No recorded changes to this operation across all 1 revision of this API.