API keys

Your API keys, for the SDK, the CLI and scripts. Managed with a login token (from the dashboard); an API key can only read the caller's identity (GET /key/context).

📄️List API keys

Returns the caller's own API keys that are not revoked, 10 per page (`page`). Keys are listed by prefix; the full key is never shown again after creation. Login tokens only: API keys get 401.

📄️Create an API key

Creates an API key for the caller, acting in the caller's organization. The response carries the full key in `key`: it is shown only once, so store it then. Use it as `Authorization: Bearer <key>`. 403 when the caller has no organization. Login tokens only: API keys get 401.

📄️Retrieve an API key

Returns one of the caller's API keys by its prefix (without the secret part). Login tokens only: API keys get 401.

📄️Delete an API key

Deletes one of the caller's API keys: requests made with it get 401 from then on. This cannot be undone. Login tokens only: API keys get 401.

📄️Get the caller's identity

Returns the caller's user id, username and organization. Accepts an API key or a login token: the SDK calls it to check its key and find its organization. 404 when the caller has no organization.