API referenceWorkspaceCredentials

Create API key

Creates a full-access organization API key. Store the returned secret securely; list calls never return it. An identical request with the same idempotency key can replay the creation response for 15 minutes. After that window, reconcile existing credentials before creating another key.

Endpoint: POST /v1/organization/api-keys
Authorization: Required permission: `apiKeys:manage`.
Environments: Production only
Idempotency: Required for safe retries.

List credentials GET

Lists organization-owned API keys without returning their secret values. Use id and lastUsedAt to audit and rotate credentials.

Delete API key DELETE

Permanently revokes an organization API key. A key cannot delete the credential currently authenticating the request.