auth-anon

Anonymous Grant

Provision an anonymous principal + org and mint a restricted token.

Public (no Bearer). Rate limited three ways: the shared PUBLIC HTTP tier, per-real-client-IP, and per client fingerprint, plus the global daily circuit breaker (R5).

post/v1/auth/anonymous

Request

  • Base URL: https://api.usekeel.io (the document declares no server; this is the origin it was published from)
  • URL: https://api.usekeel.io/v1/auth/anonymous
  • Auth: none declared

Request body

client_namestring

Display label for the granting client (e.g. 'Keel CLI/0.5.7'). Carried on the token's client_name claim and used as one half of the abuse-limit fingerprint. Never used for authorization.

Response

Successful Response

access_tokenstring required
refresh_tokenstring required
token_type'Bearer'
expires_ininteger required

Access-token lifetime in seconds.

scopestring required

Space-separated granted scope: the advertised tier tokens the credential fully covers (base, live) first, then the resolved credential_scopes (Q-1786).

anonymousboolean
org_idstring required
principal_idstring required
planstring
org_expires_atstring required

ISO timestamp when the unclaimed org is garbage-collected.

quotaobject required

Anon plan limits from plans.yaml: backtest_runs, backtest_compute_seconds, strategies_max.

noticestring required

One-line anonymous-mode notice for CLI/agent display.

claimobject required

How to keep the work: sign in and POST /v1/orgs/claim.

Changes

No recorded changes to this operation across all 1 revision of this API.