api
Auth & API keys
Org API keys (
key-…) authenticate control-plane calls.
Header
Authorization: Bearer key-…Where keys come from
Humans mint/rotate keys in the webapp Account after signup. Agents cannot create orgs or bootstrap keys.
Key management REST (org-scoped)
| Method | Path |
|---|---|
GET | /v1/orgs/me/keys |
POST | /v1/orgs/me/keys |
POST | /v1/orgs/me/keys/{key_id}/rotate |
DELETE | /v1/orgs/me/keys/{key_id} |
POST | /v1/orgs/me/rotate-key (legacy) |
Treat keys as secrets. Shown once on mint/rotate.