Skip to main content
POST
Create API access key

Autorizace

Authorization
string
header
povinné

Short-lived bearer access token issued for a Living Security API access key. Send as Authorization: Bearer .

Hlavičky

x-organization-id
string<uuid>
povinné

Organization context for multi-tenant operations

Tělo

application/json
name
string
povinné

Human-readable name for the API access key credential, usually the owning integration or automation

Required string length: 1 - 255
Příklad:

"SIEM Export Integration"

expiresAt
string | null

Optional expiration timestamp for the API access key credential in ISO 8601 format. Omit for no scheduled expiration.

Příklad:

"2027-01-01T00:00:00Z"

keyType
enum<string> | null
výchozí:user_bound

Credential type. user_bound keys are associated with the creating user's identity; service_account keys are intended for non-human service integrations.

Dostupné možnosti:
user_bound,
service_account
scopes
enum<string>[]

Permission scopes for the API access key credential. Defaults to [""] (full access). Use "push-ingest:" to restrict the credential to push data ingestion only.

Dostupné možnosti:
*,
push-ingest:*

Odpověď

201 - application/json
id
string
povinné

Stable API access key identifier

name
string
povinné

Human-readable name for the API access key credential, usually the owning integration or automation

keyType
enum<string>
povinné

Credential type for the API access key. user_bound keys are associated with the creating user's identity; service_account keys are intended for non-human service integrations.

Dostupné možnosti:
user_bound,
service_account
boundEmail
string
povinné

Email address associated with the API access key credential when the credential is user-bound

status
enum<string>
povinné

API access key status

Dostupné možnosti:
active,
revoked
createdAt
string<date-time>
povinné

Timestamp when the API access key credential was created

createdByUserId
string
povinné

Identifier of the user who created this API access key

scopes
string[]
povinné

Permission scopes assigned to this API access key

Příklad:
secret
string
povinné

One-time secret access key value. Store it immediately; it cannot be retrieved after creation or rotation.

lastUsedAt
string<date-time> | null

Last time the API access key was used

expiresAt
string<date-time> | null

Expiration timestamp for the API access key credential