Skip to main content
POST
Create a scoped personal key
This dashboard management endpoint requires the owner’s signed-in session and current password. Supply explicit scopes plus selected team/project grants, or select_all_current_teams: true to save a snapshot. New projects and memberships are never granted automatically. The secret is returned once. Prefer one named key per client, the Read only preset, and a 90-day expiration.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
name
string
required
Required string length: 1 - 120
current_password
string
required

Required when widening grants/scopes, rebinding memberships or extending expiry. Never logged.

scopes
enum<string>[]

Explicit current MCP operation. All scopes is this saved list; future operations require an owner edit.

Available options:
resources.read,
diagnostics.read,
audiences.write,
topics.write,
campaigns.draft.write,
automations.draft.write,
automation_tests.write,
automation_runs.manage,
push_apps.write,
push.test.send,
events.ingest,
automations.trigger
grants
object[]
select_all_current_teams
boolean

Resolve the owner's current eligible projects at submission and save their IDs; future access is excluded.

expires_at
string<date-time> | null

Response

Successful response

data
object
required
status
integer
metadata
object
{key}