Create a builder API key

Mint a key acting as you, the builder, in one named organisation, narrowed to chosen scopes.

POST/v1/keys

Request

curl --request POST \
  --url 'https://studio.grid82.app/v1/keys' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "organizationId": "<string>",
  "name": "<string>",
  "scopes": [
    "<string>"
  ]
}'

import json
import requests

url = "https://studio.grid82.app/v1/keys"
headers = {
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"organizationId\":\"<string>\",\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")

response = requests.request("POST", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://studio.grid82.app/v1/keys", {
  method: "POST",
  headers: {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "organizationId": "<string>",
    "name": "<string>",
    "scopes": [
      "<string>"
    ]
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://studio.grid82.app/v1/keys");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"organizationId\":\"<string>\",\"name\":\"<string>\",\"scopes\":[\"<string>\"]}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("POST", "https://studio.grid82.app/v1/keys", bytes.NewBuffer([]byte("{\"organizationId\":\"<string>\",\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")))
  req.Header.Set("Authorization", "Bearer <token>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://studio.grid82.app/v1/keys"))
    .header("Authorization", "Bearer <token>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\"organizationId\":\"<string>\",\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://studio.grid82.app/v1/keys")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer <token>"
request["Content-Type"] = "application/json"
request.body = "{\"organizationId\":\"<string>\",\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "id": "<string>",
    "kind": "key",
    "name": "<string>",
    "keyId": "<string>",
    "scopes": [
      "<string>"
    ],
    "clientId": null,
    "appIds": [
      "<string>"
    ],
    "createdAt": "<string>",
    "expiresAt": null,
    "lastUsedAt": null,
    "key": "<string>"
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}

Requires a signed-in browser; keys and connected agents cannot mint keys. Expires in 90 days unless otherwise specified; expiresInDays: null means it lives until revoked. Returned once and never stored in clear. For CI and CLI use without a browser.

Any valid credential for this API: no scope is needed. Operation keys.create. Not an MCP tool. Minting a credential from a credential is how one leaked token becomes a permanent one. Keys are made by a person in a signed-in browser, never by a connected agent. CLI: grid82 keys create (npx grid82).

Headers

Name	Type	Required	Description
`Idempotency-Key`	string	no	Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters.

Request body

Field	Type	Required	Description
`organizationId`	string	yes
`name`	string	yes	Up to 60 characters.
`scopes`	string[]	yes
`expiresInDays`	integer or null	no

Response

application/json

Success

dataobjectrequired

Show child attributes

data.idstringrequired

data.kindenum<string>requiredone of: key, oauth

data.namestringrequired

data.keyIdstringrequired

data.scopesstring[]required

data.clientIdstringnullrequired

data.appIdsstring[] | nullrequired

data.createdAtstringrequired

data.expiresAtstringnullrequired

data.lastUsedAtstringnullrequired

data.keystringrequired

curl --request POST \ --url 'https://studio.grid82.app/v1/keys' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "organizationId": "<string>", "name": "<string>", "scopes": [ "<string>" ] }'

{ "data": { "id": "<string>", "kind": "key", "name": "<string>", "keyId": "<string>", "scopes": [ "<string>" ], "clientId": null, "appIds": [ "<string>" ], "createdAt": "<string>", "expiresAt": null, "lastUsedAt": null, "key": "<string>" } }

Create a builder API key

Headers

Request body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown