Issue a free API key (when signup is enabled)

Public: no authentication required. When the gateway runs with ALLOW_SIGNUP=true, mints a fresh random API key, stores only its digest, and returns the secret once. The credential belongs to an account so rotation preserves files and allowance usage. Issued keys hold every scope except service:operate. Issuance is persistently rate limited per client IP and UTC day.

Body

application/json object

{
  "name": "string"
}

Errors

curl -X POST https://gateway.kepto.xyz/api/v1/keys \
  -H "Content-Type: application/json" \
  -d '{
    "name": "string"
  }'

{
  "apiKey": "string",
  "key": {
    "id": "string",
    "name": "string",
    "prefix": "string",
    "scopes": [
      "account:manage"
    ],
    "createdAt": 0,
    "lastUsedAt": 0,
    "revokedAt": 0,
    "rotatedFrom": "string"
  },
  "freeTierMaxBytes": 0
}