API Keys

Endpointhttps://api.kontorion.eu/v1

List API keys

GET

https://api.kontorion.eu/v1

/api-keys

Returns API keys for the active organization. Plaintext keys are NOT returned; only metadata (id, prefix, scopes, expiry, last-used).

List API keys › Responses

List of API key metadata

Create an API key

POST

https://api.kontorion.eu/v1

/api-keys

Mints a new API key. The plaintext token (sk_live_... or sk_test_...) is returned ONCE in the response and never persisted; record it immediately.

Create an API key › Request Body

allowed_ips

string[]

nil/empty = unrestricted

expires_at

string

nil = non-expiring

key_type

string

sk_live | sk_test; defaults to mode

name

string

scopes

string[]

nil/empty = all-access

Create an API key › Responses

Includes the plaintext key - show to user once

allowed_ips

string[]

created_at

string

expires_at

string

id

string

key

string

key_prefix

string

key_type

string

name

string

scopes

string[]

POST/api-keys

curl --request POST \
  --url https://api.kontorion.eu/v1/api-keys \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowed_ips": [
    "string"
  ],
  "expires_at": "expires_at",
  "key_type": "key_type",
  "name": "name",
  "scopes": [
    "string"
  ]
}
'

shell

Example Request Body

{
  "allowed_ips": [
    "string"
  ],
  "expires_at": "expires_at",
  "key_type": "key_type",
  "name": "name",
  "scopes": [
    "string"
  ]
}

json

Example Responses

{
  "allowed_ips": [
    "string"
  ],
  "created_at": "created_at",
  "expires_at": "expires_at",
  "id": "id",
  "key": "key",
  "key_prefix": "key_prefix",
  "key_type": "key_type",
  "name": "name",
  "scopes": [
    "string"
  ]
}

json

application/json

Rotate an API key

POST

https://api.kontorion.eu/v1

/api-keys/rotate

Issues a fresh plaintext token for an existing key, atomically revoking the old one. Use to roll keys without losing scopes/IP allowlists/expiry settings. The new token is returned once.

Rotate an API key › Request Body

Rotate an API key › Responses

Includes the new plaintext key - show to user once

allowed_ips

string[]

created_at

string

expires_at

string

id

string

key

string

key_prefix

string

key_type

string

name

string

scopes

string[]

Revoke an API key

POST

https://api.kontorion.eu/v1

/api-keys/{id}/revoke

Marks an API key as revoked. Subsequent requests presenting this key will fail with 401.

Revoke an API key › path Parameters

id

string · required

API key ID (UUID)

Revoke an API key › Responses

Key revoked

No data returned

Accounting Approval Workflows

Create an API key

POST

https://api.kontorion.eu/v1

/api-keys

Mints a new API key. The plaintext token (sk_live_... or sk_test_...) is returned ONCE in the response and never persisted; record it immediately.

Create an API key › Request Body

allowed_ips

string[]

nil/empty = unrestricted

expires_at

string

nil = non-expiring

key_type

string

sk_live | sk_test; defaults to mode

name

string

scopes

string[]

nil/empty = all-access

Create an API key › Responses

Includes the plaintext key - show to user once

allowed_ips

string[]

created_at

string

expires_at

string

id

string

key

string

key_prefix

string

key_type

string

name

string

scopes

string[]

Rotate an API key

POST

https://api.kontorion.eu/v1

/api-keys/rotate

Issues a fresh plaintext token for an existing key, atomically revoking the old one. Use to roll keys without losing scopes/IP allowlists/expiry settings. The new token is returned once.

Rotate an API key › Request Body

Rotate an API key › Responses

Includes the new plaintext key - show to user once

allowed_ips

string[]

created_at

string

expires_at

string

id

string

key

string

key_prefix

string

key_type

string

name

string

scopes

string[]