Create a new management key
Mints a new opaque management key (sk-orq-<key_id>-<secret>) in the workspace. The raw secret is returned ONCE in the response and is never retrievable afterwards. The stored record retains only token_prefix and a SHA-256 token_hash.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
Human-readable name. Required.
Permission preset. Defaults to MANAGEMENT_PERMISSION_MODE_ALL when omitted.
MANAGEMENT_PERMISSION_MODE_UNSPECIFIED, MANAGEMENT_PERMISSION_MODE_ALL, MANAGEMENT_PERMISSION_MODE_RESTRICTED, MANAGEMENT_PERMISSION_MODE_READ_ONLY Per-domain access map. Required when permission_mode =
MANAGEMENT_PERMISSION_MODE_RESTRICTED. See ManagementKey.access
for the catalog of valid keys (Domain.id) and AccessLevel string
values, or fetch the live catalog via the capability catalog
endpoint.
Optional expiration. When set, the authenticate hot-path rejects
the key once expires_at is in the past. Unset means the key
never expires.