API Keys

Base: /v1/api-keys · Auth: Clerk session only, always

POST /v1/api-keys — Create

Body: {name: string (1-255 chars)} Response 201: ApiKeyResponse + key (full value, shown once only)

GET /v1/api-keys — List

Returns ApiKeyResponse[] — never includes key, only prefix.

DELETE /v1/api-keys/{id} — Revoke

Immediate and permanent.

Errors: 404 API_KEY_NOT_FOUND, 409 API_KEY_ALREADY_REVOKED.

ApiKeyResponse shape

{
  "id": "string",
  "prefix": "string",
  "name": "string",
  "created_at": "datetime",
  "last_used_at": "datetime | null",
  "revoked_at": "datetime | null"
}