Skip to main content
POST
Create a personal API key with explicit access and password verification. The new key is returned once; it is not stored in an operation receipt.
Create a personal API key with explicit access and password verification. The new key is returned once; it is not stored in an operation receipt. Requires a scoped personal key, the authenticated account, and personal_keys.manage. Current role and credential grants remain enforced. See Agent messaging and project operations for authorization and recovery.

Authorizations

Authorization
string
header
required

Integration key for backend workloads, or a scoped personal key (sr_user_) for account discovery and supported project operations. MCP accepts only personal keys.

Body

application/json
name
string
required

Display name.

Required string length: 1 - 120
current_password
string
required
write-only

Write-only current account password. Required for creating keys or widening personal key access.

Required string length: 1 - 1024
scopes
string[]
required

Explicit operation scopes supported by personal_keys_list.

Required array length: 1 - 100 elements

Operation scope.

Required string length: 1 - 120
grants
object[]
required

Explicit team/project grants. No new grants are implied by omission.

Required array length: 1 - 500 elements
expires_at
string<date-time> | null

Future expiry timestamp; null means no expiration.

creator_access
boolean

Allow this key to receive grants for teams/projects it creates. Requires explicit create scopes.

Response

Authorized result, preparation, or durable execution receipt.

status
integer
required
data
object
required