Skip to main content
Programmatic API key management. Requires a master (admin-scoped) qlaud key on the x-api-key header.

POST /v1/keys — Mint

Body

Response (201)

secret is returned once. We store only its SHA-256 hash. If you lose it, revoke + remint.

GET /v1/keys — List

Response

DELETE /v1/keys/:keyId — Revoke

Response (200)

Revocation is immediate — KV cache entry is deleted on revoke, so the key stops working on the next request.