Create a new management key
Mints a new opaque management key (sk-orq-<key_id>-<secret>) in the workspace. The raw secret is returned ONCE in the response and is never retrievable afterwards. The stored record retains only token_prefix and a SHA-256 token_hash.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
Human-readable name. Required.
Permission preset. Required; an omitted or unspecified value is rejected with INVALID_ARGUMENT rather than defaulted to full access.
MANAGEMENT_PERMISSION_MODE_ALL, MANAGEMENT_PERMISSION_MODE_RESTRICTED, MANAGEMENT_PERMISSION_MODE_READ_ONLY Per-domain access map. Required when permission_mode =
MANAGEMENT_PERMISSION_MODE_RESTRICTED. See ManagementKey.access
for the catalog of valid keys (Domain.id) and AccessLevel string
values, or fetch the live catalog via the capability catalog
endpoint.
Optional expiration. The key is rejected once expires_at is in the
past. Unset means the key never expires.