Skip to content
Sign in Waitlist
Docs/API reference/API keys/Create API key

Create API key

POST /v1/api-keys scope admin

Creates a key. The secret is shown ONCE, in the response.

HeadersAuthorization: Bearer praeko_… and X-Praeko-Contract: en. Always send both.

Legacy Portuguese alias (still answered, marked as deprecated): /v1/chaves.

Parameters

Name In Description
Idempotency-Key header Idempotency key (1 to 255 visible characters, for example a UUID). Repeating the SAME request with the same key within 24 h returns the stored response (with Idempotent-Replayed: true) without running it again; a different request with the same key returns 422 idempotency_key_reuse; a request still in progress returns 409 idempotency_in_progress. 5xx errors are not stored. The key is scoped per workspace and per route. See Retry a request safely.

Request body

JSON. Required fields must be sent; the others can be left out.

Field Type Description
name required string A name to help you recognize the key. 1 to 60 characters.
scope (optional) string Key scope (each level includes the previous one). Values: read, write, admin; default: write.
expiresInDays (optional) integer Validity in days. Without it, the key never expires. 1 to 365.
Body example
{
  "name": "script automation",
  "scope": "write",
  "expiresInDays": 90
}

Example

curl -X POST "https://praeko.app/v1/api-keys" \
  -H "Authorization: Bearer $PRAEKO_KEY" \
  -H "X-Praeko-Contract: en" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "script automation",
  "scope": "write",
  "expiresInDays": 90
}'

Response

Success status When
200 Success.
Response 200
{
  "id": "01KA3Y1B9E5MK7PR3XD0V4SN2G",
  "name": "script automation",
  "scope": "write",
  "prefix": "praeko_8vN2xQe",
  "expiresAt": "2027-02-05T14:02:11.482Z",
  "key": "praeko_8vN2xQe4L1mTz7Hc0Yb5Wd3KfRj6PaUo9GtSi2XnVEwqLs",
  "warning": "store this key now: it will not be shown again"
}

warning is free text the server writes in Portuguese; the example shows it in English.

Errors

Status code When
400 empty_body The request body is empty.
400 invalid_json The request body is not a JSON object.
413 body_too_large The request body is larger than 1 MB.
422 invalid_field name missing, unknown scope, or expiresInDays outside 1 to 365.
422 idempotency_key_reuse The Idempotency-Key was already used with a different request (different method, path, query or body).
409 idempotency_in_progress A request with the same Idempotency-Key is still in progress (retry in a moment).
409 idempotency_response_too_large The original response was larger than 256 KB and was not stored; fetch the resource with GET instead.

Errors on any route

Status code When
401 unauthorized The Authorization: Bearer … header is missing.
401 invalid_api_key The key does not exist.
401 revoked_api_key The key has been revoked.
401 expired_api_key The key has expired.
403 forbidden The key's scope is not enough for this route (see the scope badge).
429 rate_limited The per-minute request limit was exceeded.

The body of every error is { "error": { "code", "message", "details"? } }. See all error codes.

Try it

Try it

The live test uses your key and your account. It stays off when you are not signed in.

Sign in to try it
Question or mistake on this page? contato@praeko.appView .md

Type to search pages, routes and error codes.