Skip to main content
POST
Create API access key

Autoryzacje

Authorization
string
header
wymagane

Short-lived bearer access token issued for a Living Security API access key. Send as Authorization: Bearer .

Nagłówki

x-organization-id
string<uuid>
wymagane

Organization context for multi-tenant operations

Treść

application/json
name
string
wymagane

Human-readable name for the API access key credential, usually the owning integration or automation

Required string length: 1 - 255
Przykład:

"SIEM Export Integration"

expiresAt
string | null

Optional expiration timestamp for the API access key credential in ISO 8601 format. Omit for no scheduled expiration.

Przykład:

"2027-01-01T00:00:00Z"

keyType
enum<string> | null
domyślnie:user_bound

Credential type. user_bound keys are associated with the creating user's identity; service_account keys are intended for non-human service integrations.

Dostępne opcje:
user_bound,
service_account
scopes
enum<string>[]

Permission scopes for the API access key credential. Defaults to [""] (full access). Use "push-ingest:" to restrict the credential to push data ingestion only.

Dostępne opcje:
*,
push-ingest:*

Odpowiedź

201 - application/json
id
string
wymagane

Stable API access key identifier

name
string
wymagane

Human-readable name for the API access key credential, usually the owning integration or automation

keyType
enum<string>
wymagane

Credential type for the API access key. user_bound keys are associated with the creating user's identity; service_account keys are intended for non-human service integrations.

Dostępne opcje:
user_bound,
service_account
boundEmail
string
wymagane

Email address associated with the API access key credential when the credential is user-bound

status
enum<string>
wymagane

API access key status

Dostępne opcje:
active,
revoked
createdAt
string<date-time>
wymagane

Timestamp when the API access key credential was created

createdByUserId
string
wymagane

Identifier of the user who created this API access key

scopes
string[]
wymagane

Permission scopes assigned to this API access key

Przykład:
secret
string
wymagane

One-time secret access key value. Store it immediately; it cannot be retrieved after creation or rotation.

lastUsedAt
string<date-time> | null

Last time the API access key was used

expiresAt
string<date-time> | null

Expiration timestamp for the API access key credential