Skip to main content
POST
Mint a self-serve public-API key

Authorizations

Authorization
string
header
required

Clerk session token, Authorization: Bearer <token> — the first-party browser app's own auth. Used only by this internal /api/v1/* surface, never by /api/public/v1/*.

Body

application/json
name
string
required
Required string length: 1 - 256
expirationDays
integer

Response

The newly created key, including its plaintext secret.

id
string
required
name
string
required
secret
string
required

The raw key value. Shown exactly once, on creation.

scopes
string[]
required
expiresAt
string | null
required