---
title: "Create a scoped API key"
method: POST
path: "/v1/api-keys"
---

# Create a scoped API key

`POST /v1/api-keys`

## Request

- Base URL: `https://api.skysay.ai`
- URL: `https://api.skysay.ai/v1/api-keys`
- Auth: none declared

Requested scopes must be workspace scopes the caller itself holds, or one of the grant bundles `all`, `all-read`, `all-write`, which are recorded by name and expanded at use time against the grant catalogue minus operator-only scopes. Operator and wildcard scopes are not grantable here; see POST /v1/operator/machine-credentials.

## Response `201`

API key with one-time token

## Other responses

- `403`: A requested scope is not grantable to a workspace key, or the caller does not hold it

---

[API](https://skmtc.dev/skysay/apis/skysay-api.md) · [All operations](https://skmtc.dev/skysay/apis/skysay-api/llms.txt) · [OpenAPI document](https://skmtc.dev/skysay/apis/skysay-api/revisions/95b8c66f99aa?raw)