Playground

Playground

IntegrationApiKey

/api/v1/integration/api-keys

An API key issued to an Application.

listgetcreaterevoke

Schema

FieldTypeNotes
id*uuidServer-assigned ULID with type prefix (e.g. per_…).
tenant_id*stringTenant scope — auto-stamped from the caller's JWT.
app_idstringApp scope. Stamped ONLY when the caller's JWT was minted for a specific Application (integration API keys). Absent for human-user sessions. Filters reads when present.
created_at*date-timeServer stamp.
updated_at*date-timeServer stamp; updated on every patch.
created_byuuidPerson id from the caller's JWT (sub).
updated_byuuidPerson id from the last writer's JWT (sub).
sourcestringProvenance tag — defaults to 'edm'.
source_typeenumfrontend | backend | server | system | apiWhere the write originated. Defaults to 'api'.
is_deletedbooleanSoft-delete flag. Excluded from default list queries.
deleted_atdate-timeStamped when soft-deleted; null otherwise.
deleted_byuuidPerson id who soft-deleted; null otherwise.
schema_versionnumberDocument schema version. Bumped on incompatible writes.
namestringHuman-readable label for this key.
key_hashstringSHA-256 hash of the raw key (unique). Never returned after initial creation.
prefixstringFirst 8 chars of raw key for UI display, e.g. sk-acme-.
kindstringKey classification.
issued_to_user_idstringUser this key was issued to, if kind=user.
issued_to_servicestringService name this key was issued to, if kind=service.
scopesjsonPermission scopes granted to this key.
allowed_modelsjsonIf kind=virtual_llm, allowlist of model identifiers.
tpm_limitnumberTokens per minute rate limit.
rpm_limitnumberRequests per minute rate limit.
max_budget_usdnumberMaximum spend cap in USD.
spend_usdnumberCached spend counter in USD.
blockedbooleanWhether this key is blocked from making requests.
blocked_reasonstringReason the key was blocked.
last_used_atdate-timeTimestamp of the last successful use of this key.
expires_atdate-timeExpiry timestamp; null for non-expiring keys.
rotated_from_key_idstringID of the key this was rotated from.
created_by_user_idstringID of the user who created this key.
tagsjsonFree-form tags.
versionnumberOptimistic concurrency version counter.
application_iduuidOwning application id.
key_fingerprintstringSHA-256 hash of the raw key. Raw key is never stored.
key_prefixstringFirst chars of the raw key for UI display only.
statusenumactive | revoked | expiredOperational status of the key.

API

Loading manifest…