Developer API

API Keys

Create, scope, revoke, and rotate keys.

Create

Create a key with a name, a set of scopes, and an optional expiration. The plaintext key is returned exactly once.

List

GET /v1/developer/keys
Authorization: Bearer <wallet-session-token>

Revoke / rotate

POST /v1/developer/keys/:id/revoke
POST /v1/developer/keys/:id/rotate

Rotating returns a fresh plaintext key (shown once) and immediately invalidates the old one.

Never expose

  • The full key is shown exactly once at creation/rotation.
  • Only a one-way hash is stored server-side.
  • Never send keys in URLs or logs.