API keys API

Manage API keys from code instead of the dashboard's Connect tab. Requires a dashboard token or another API key.

Create a key

POST /api-keys

{ "name": "prod-backend" }

Response 201 — the only time the raw key is ever returned:

{
  "id": "...",
  "name": "prod-backend",
  "key_prefix": "wak_a1b2",
  "key": "wak_a1b2c3d4...",
  "created_at": "2026-08-17T12:00:00Z"
}

Store key immediately. It cannot be retrieved again — losing it means generating a new one.

List keys

GET /api-keys

Returns id, name, key_prefix, last_used_at, created_at for each key — never the raw key. Use key_prefix and last_used_at to identify which key is which and spot unused ones.

Revoke a key

DELETE /api-keys/{key_id}

204. Takes effect immediately — any request already using that key gets 401 on its next call.