API Keys

Create an API key

Returns the plaintext key exactly once, in data.token. It is stored only as a hash and cannot be recovered afterwards. A key authenticates as its owner, limited to the scopes and IP ranges given here. Scopes gate features, not verbs, and are enforced from the request path: inference for /openai/* and the OpenRouter passthrough, voice for /openai/v1/audio/* and /voice-agent, search for web search and places, media for image and video generation, storage for file storage, account for the owner's profile, usage, billing and rewards, companies for hosted OpenCompany instances, and connections for the owner's third-party connections at /agent-integrations/composio. meetings is a legacy scope kept so existing keys still validate; it gates no route. The agent runtime (/channels, /webhooks, /mascots, /telemetry) and the built-in tool integrations are open to every key. A key bills its owner; it carries no other tenancy. connections is never granted unless requested. An attested hosted OpenCompany instance also reaches /agent-integrations/composio, authenticating with a short-lived audience-bound cluster token rather than a minted key.

post/api-keys

Request

Base URL: https://api.tinyhumans.ai
URL: https://api.tinyhumans.ai/api-keys
Auth: HTTP bearer

Request body

namestring required

scopesstring[]

allowedIpsstring[]

Single IPs and/or CIDR ranges (IPv4 or IPv6). Empty means no IP restriction.

expiresAtstring date-time

Optional expiry, at most 1 year out.

Example request

{
  "name": "CI pipeline",
  "allowedIps": [
    "203.0.113.4",
    "10.0.0.0/8",
    "2001:db8::/32"
  ]
}

Response

Key created; data.token holds the one-time plaintext key

Changes

No recorded changes to this operation across all 1 revision of this API.