Create a personal API key for this app

Mint a key that acts as you in this app, with no more permissions than you have.

POST/v1/me/keys

Request

curl --request POST \
  --url 'https://your-suite.grid82.app/your-app/v1/me/keys' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "<string>",
  "scopes": [
    "<string>"
  ]
}'

import json
import requests

url = "https://your-suite.grid82.app/your-app/v1/me/keys"
headers = {
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")

response = requests.request("POST", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://your-suite.grid82.app/your-app/v1/me/keys", {
  method: "POST",
  headers: {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "name": "<string>",
    "scopes": [
      "<string>"
    ]
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://your-suite.grid82.app/your-app/v1/me/keys");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("POST", "https://your-suite.grid82.app/your-app/v1/me/keys", bytes.NewBuffer([]byte("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")))
  req.Header.Set("Authorization", "Bearer <token>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://your-suite.grid82.app/your-app/v1/me/keys"))
    .header("Authorization", "Bearer <token>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://your-suite.grid82.app/your-app/v1/me/keys")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer <token>"
request["Content-Type"] = "application/json"
request.body = "{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "id": "<string>",
    "kind": "key",
    "name": "<string>",
    "keyId": "<string>",
    "scopes": [
      "<string>"
    ],
    "clientId": null,
    "appIds": [
      "<string>"
    ],
    "createdAt": "<string>",
    "expiresAt": null,
    "lastUsedAt": null,
    "key": "<string>"
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}

Only signed-in browsers can mint keys; keys and connected agents cannot mint keys. Keys expire in 90 days unless configured otherwise; expiresInDays: null keeps the key active until revoked. The key is returned once and never stored in clear.

Any valid credential for this API: no scope is needed. Operation me.keys.create. Not an MCP tool. Minting a credential from a credential is how one leaked token becomes a permanent one. Keys are made by a person in a signed-in browser, never by a connected agent. CLI: grid82 me keys create (npx grid82).

Headers

Name	Type	Required	Description
`Idempotency-Key`	string	no	Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters.

Request body

Field	Type	Required	Description
`name`	string	yes	Up to 60 characters.
`scopes`	string[]	yes
`expiresInDays`	integer or null	no

Response

application/json

Success

dataobjectrequired

Show child attributes

data.idstringrequired

data.kindenum<string>requiredone of: key, oauth

data.namestringrequired

data.keyIdstringrequired

data.scopesstring[]required

data.clientIdstringnullrequired

data.appIdsstring[] | nullrequired

data.createdAtstringrequired

data.expiresAtstringnullrequired

data.lastUsedAtstringnullrequired

data.keystringrequired

curl --request POST \ --url 'https://your-suite.grid82.app/your-app/v1/me/keys' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "name": "<string>", "scopes": [ "<string>" ] }'

{ "data": { "id": "<string>", "kind": "key", "name": "<string>", "keyId": "<string>", "scopes": [ "<string>" ], "clientId": null, "appIds": [ "<string>" ], "createdAt": "<string>", "expiresAt": null, "lastUsedAt": null, "key": "<string>" } }

Create a personal API key for this app

Headers

Request body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown