API referenceWorkspaceCredentials

Create API key

Creates a full-access organization API key. The secret value is returned exactly once in this response; store it securely because later list calls only return an obfuscated value.

Endpoint: POST /v1/organization/api-keys
Authorization: Required permission: `apiKeys:manage`.
Environments: Production only
Idempotency: Required for safe retries.

List credentials GET

Lists organization-owned API keys without returning their secret values. Use id and lastUsedAt to audit and rotate credentials.

Delete API key DELETE

Permanently revokes an organization API key. A key cannot delete the credential currently authenticating the request.