API Keys

Endpointhttps://api.kontorion.eu/v1

List API keys

GET

https://api.kontorion.eu/v1

/api-keys

Returns API keys for the active organization. Plaintext keys are NOT returned; only metadata (id, prefix, scopes, expiry, last-used).

List API keys › Headers

X-Workspace-Id

string

Selects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.

Workspace UUID or slug.

List API keys › Responses

array | null · required

object · required

GET/api-keys

curl --request GET \
  --url https://api.kontorion.eu/v1/api-keys

shell

Example Responses

{
  "data": [
    {
      "allowed_ips": [
        "string"
      ],
      "created_at": "2024-08-25T15:00:00Z",
      "expires_at": "2024-08-25T15:00:00Z",
      "id": "0f8fad5b-d9cb-469f-a165-70867728950e",
      "key_prefix": "key_prefix",
      "key_type": "key_type",
      "last_used_at": "2024-08-25T15:00:00Z",
      "last_used_ip": "last_used_ip",
      "name": "name",
      "scopes": [
        "string"
      ],
      "status": "status",
      "workspace_id": "0f8fad5b-d9cb-469f-a165-70867728950e"
    }
  ],
  "pagination": {
    "counts": {
      "key": {
        "key": 0
      }
    },
    "cursor": "cursor",
    "has_more": true,
    "total_count": 0
  }
}

json

application/json

Create an API key

POST

https://api.kontorion.eu/v1

/api-keys

Mints a new API key. The plaintext token (sk_live_... or sk_test_...) is returned ONCE in the response and never persisted; record it immediately.

Create an API key › Headers

Idempotency-Key

string · required

Unique key that makes this POST safe to retry: repeats with the same key replay the first response instead of re-executing. Replays are scoped to the retrying principal (same API key / user) and kept for 24 hours. Required on every POST.

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Create an API key › Request Body

allowed_ips

array | null

expires_at

string | null · date-time

key_type

string

name

string

scopes

array | null

Create an API key › Responses

Created

object · required

POST/api-keys

curl --request POST \
  --url https://api.kontorion.eu/v1/api-keys \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <string>' \
  --data '
{
  "allowed_ips": [
    "string"
  ],
  "expires_at": "2024-08-25T15:00:00Z",
  "key_type": "key_type",
  "name": "name",
  "scopes": [
    "string"
  ]
}
'

shell

Example Request Body

{
  "allowed_ips": [
    "string"
  ],
  "expires_at": "2024-08-25T15:00:00Z",
  "key_type": "key_type",
  "name": "name",
  "scopes": [
    "string"
  ]
}

json

Example Responses

{
  "data": {
    "allowed_ips": [
      "string"
    ],
    "created_at": "2024-08-25T15:00:00Z",
    "expires_at": "2024-08-25T15:00:00Z",
    "id": "0f8fad5b-d9cb-469f-a165-70867728950e",
    "key": "key",
    "key_prefix": "key_prefix",
    "key_type": "key_type",
    "name": "name",
    "scopes": [
      "string"
    ]
  }
}

json

application/json

Rotate an API key

POST

https://api.kontorion.eu/v1

/api-keys/rotate

Issues a fresh plaintext token for the org's key, atomically revoking the old one after a 24h grace window. Use to roll keys without losing scopes/IP allowlists/expiry settings. The new token is returned once.

Rotate an API key › Headers

Idempotency-Key

string · required

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Rotate an API key › Responses

Created

object · required

Revoke an API key

POST

https://api.kontorion.eu/v1

/api-keys/{id}/revoke

Marks an API key as revoked. Subsequent requests presenting this key will fail with 401.

Revoke an API key › path Parameters

id

string · uuid · required

API key ID (UUID)

Revoke an API key › Headers

Idempotency-Key

string · required

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Revoke an API key › Responses

object · required

AI Account

List API keys

GET

https://api.kontorion.eu/v1

/api-keys

Returns API keys for the active organization. Plaintext keys are NOT returned; only metadata (id, prefix, scopes, expiry, last-used).

List API keys › Headers

X-Workspace-Id

string

Workspace UUID or slug.

List API keys › Responses

array | null · required

object · required

Create an API key

POST

https://api.kontorion.eu/v1

/api-keys

Mints a new API key. The plaintext token (sk_live_... or sk_test_...) is returned ONCE in the response and never persisted; record it immediately.

Create an API key › Headers

Idempotency-Key

string · required

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Create an API key › Request Body

allowed_ips

array | null

expires_at

string | null · date-time

key_type

string

name

string

scopes

array | null

Create an API key › Responses

Created

object · required

Rotate an API key

POST

https://api.kontorion.eu/v1

/api-keys/rotate

Rotate an API key › Headers

Idempotency-Key

string · required

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Rotate an API key › Responses

Created

object · required

Revoke an API key

POST

https://api.kontorion.eu/v1

/api-keys/{id}/revoke

Marks an API key as revoked. Subsequent requests presenting this key will fail with 401.

Revoke an API key › path Parameters

id

string · uuid · required

API key ID (UUID)

Revoke an API key › Headers

Idempotency-Key

string · required

Client-generated idempotency key (e.g. a UUID).

X-Workspace-Id

string

Workspace UUID or slug.

Revoke an API key › Responses

object · required