Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

User session token

Body

application/json
account_ids
string[] | null

Accounts the key may act on. Each must be one the caller has access to. When omitted, the key covers every account the caller can access. When provided, the key is restricted to exactly those accounts.

allowed_ips
string[] | null
permissions
null | object

Permissions to grant the key, intersected per request with the caller's current permissions on the requested account (so a key can never out-rank its owner). When omitted, the key is granted full permissions and behaves as the user.

Response

API key created successfully

api_key
string
required
api_secret
string
required