API Keys

Adopt Api Key

Re-activate a revoked org API key -- iff the caller presents the secret itself.

Account linking (get_current_user's email-match branch) revokes every credential minted before a verified owner bound to the account, because nothing about a pre-link row can prove the key holder and the inbox owner are the same human. This endpoint is the explicit proof-of-control recovery for the legitimate holder: only someone who actually has the raw secret can present it, and the compare is scoped to revoked keys of the caller's own org, so it can never reach another account's keys.

An expired key stays dead -- adopt restores the link-time sweep, it does not resurrect keys that aged out.

post/api/api-keys/adopt

Request

  • Base URL: https://zsign.io (the document declares no server; this is the origin it was published from)
  • URL: https://zsign.io/api/api-keys/adopt
  • Auth: HTTP bearer

Request body

api_keystring required

Full secret of the revoked key to re-activate

Response

Successful Response

idstring uuid required
namestring required
key_prefixstring required
last_used_atstring date-time nullable required
expires_atstring date-time nullable required
created_atstring date-time required
creator_emailstring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.