API Keys

List API keys

get

List all API keys for a workspace with pagination. Requires ApiKey.view permission.

Authorizations

BearerAuth

AuthorizationstringRequired

API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.

Path parameters

workspace_idstring · uuidRequired

Query parameters

mine_onlybooleanOptionalDefault: false

limitinteger · max: 100OptionalDefault: 10

continuation_tokenintegerOptionalDefault: 0

Responses

200

Successful Response

application/json

has_morebooleanRequired

continuation_tokeninteger · nullableOptional

totalinteger · nullableOptional

401

Missing or invalid API key.

403

Insufficient permissions.

422

Validation Error

application/json

get/v1/{workspace_id}/api-keys

HTTPcURLJavaScriptPython

GET /v1/{workspace_id}/api-keys HTTP/1.1
Host: api.platform.amigo.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "workspace_id": "123e4567-e89b-12d3-a456-426614174000",
      "created_by_entity_id": "123e4567-e89b-12d3-a456-426614174000",
      "created_by_credential_id": "123e4567-e89b-12d3-a456-426614174000",
      "key_id": "text",
      "name": "text",
      "role": "text",
      "permissions": [
        "text"
      ],
      "expires_at": "2026-07-10T21:15:51.968Z",
      "last_used_at": "2026-07-10T21:15:51.968Z",
      "created_at": "2026-07-10T21:15:51.968Z",
      "updated_at": "2026-07-10T21:15:51.968Z"
    }
  ],
  "has_more": true,
  "continuation_token": 1,
  "total": 1
}

Create an API key

post

Create a new API key for a workspace. The response includes the plaintext api_key — store it securely, it cannot be retrieved again.

Authorizations

BearerAuth

AuthorizationstringRequired

API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.

Path parameters

workspace_idstring · uuidRequired

Body

application/json

namestring · min: 1 · max: 256 · nullableOptional

duration_daysinteger · min: 1 · max: 90Required

rolestring · max: 64OptionalDefault: member

permissionsstring[] · max: 128Optional

Permission names. Max 128 entries; each entry up to 128 chars.

Responses

201

Successful Response

application/json

key_idstringRequired

api_keystringRequired

namestring · nullableRequired

rolestringRequired

permissionsstring[]Required

expires_atstring · date-timeRequired

created_by_entity_idstring · uuid · nullableRequired

created_by_credential_idstring · uuid · nullableRequired

401

Missing or invalid API key.

403

Insufficient permissions or requested role exceeds caller access.

422

Invalid request body or role.

post/v1/{workspace_id}/api-keys

HTTPcURLJavaScriptPython

POST /v1/{workspace_id}/api-keys HTTP/1.1
Host: api.platform.amigo.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 72

{
  "name": "text",
  "duration_days": 1,
  "role": "member",
  "permissions": [
    "text"
  ]
}

{
  "key_id": "text",
  "api_key": "text",
  "name": "text",
  "role": "text",
  "permissions": [
    "text"
  ],
  "expires_at": "2026-07-10T21:15:51.968Z",
  "created_by_entity_id": "123e4567-e89b-12d3-a456-426614174000",
  "created_by_credential_id": "123e4567-e89b-12d3-a456-426614174000"
}

Delete an API key

delete

Revoke an API key. Requires ApiKey.delete permission.

Authorizations

BearerAuth

AuthorizationstringRequired

API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.

Path parameters

workspace_idstring · uuidRequired

key_idstringRequired

Responses

204

Successful Response

No content

401

Missing or invalid API key.

403

Insufficient permissions.

404

API key not found.

422

Validation Error

application/json

delete/v1/{workspace_id}/api-keys/{key_id}

HTTPcURLJavaScriptPython

DELETE /v1/{workspace_id}/api-keys/{key_id} HTTP/1.1
Host: api.platform.amigo.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Rotate an API key

post

Replace an API key secret in one step. The old secret stops working immediately, and the response includes the new plaintext api_key exactly once.

Authorizations

BearerAuth

AuthorizationstringRequired

API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.

Path parameters

workspace_idstring · uuidRequired

key_idstringRequired

Body

application/json

duration_daysinteger · min: 1 · max: 90Required

Responses

200

Successful Response

application/json

key_idstringRequired

api_keystringRequired

namestring · nullableRequired

rolestringRequired

permissionsstring[]Required

expires_atstring · date-timeRequired

created_by_entity_idstring · uuid · nullableRequired

created_by_credential_idstring · uuid · nullableRequired

401

Missing or invalid API key.

403

Insufficient permissions.

404

API key not found.

422

Validation Error

application/json

post/v1/{workspace_id}/api-keys/{key_id}/rotate

HTTPcURLJavaScriptPython

POST /v1/{workspace_id}/api-keys/{key_id}/rotate HTTP/1.1
Host: api.platform.amigo.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 19

{
  "duration_days": 1
}

{
  "key_id": "text",
  "api_key": "text",
  "name": "text",
  "role": "text",
  "permissions": [
    "text"
  ],
  "expires_at": "2026-07-10T21:15:51.968Z",
  "created_by_entity_id": "123e4567-e89b-12d3-a456-426614174000",
  "created_by_credential_id": "123e4567-e89b-12d3-a456-426614174000"
}