For the complete documentation index, see llms.txt.

POST /v1/api-keys

Create API Key

Create a new API key for programmatic access. **Important**: The full key is only shown once in the response. Store it securely.

Auth required: Yes

Parameters

• Idempotency-Key (header, string) — Unique key for idempotent POST requests (1-256 chars: alphanumeric, `_`, `-`, `:`, `.`). Same key + same body within 24h replays the cached response.

Request Body

• name: string (required)
• description: string
• scopes: array
• rate_limit_per_hour: integer
• key_type: string — Key type. Secret keys (`vennio_sk_*`) are for server-side use. Publishable keys (`vennio_pk_*`) are for client-side use and can be restricted to specific domains via `allowed_domains`.
• allowed_domains: array — Origin domains allowed to use this key (publishable keys only). Requests from unlisted origins are rejected. Supports exact match and subdomain matching (e.g. `example.com` allows `sub.example.com`).
• expires_at: string
• environment: string — Key environment. Test keys (vennio_sk_test_*) skip all side effects.

Responses

• 201: API key created
• 400: Validation error
• 401: Authentication required or invalid
• 409: A request with this Idempotency-Key is currently being processed
• 422: Idempotency-Key was already used with a different request body

Authentication

Requires authentication. Pass a Bearer token (Supabase JWT) or an API key (`Authorization: Bearer vennio_sk_live_*`) in the request headers.

Base URL: https://api.vennio.app