Create Org Key
Mint an org key. The secret is shown exactly once.
Bound to this org by construction, and capped at what the person minting it
holds here - the same rule as a personal key, applied to a different owner.
The one thing it can never carry is org_key:manage: a key that can mint
keys would hand its holder a second one without the session and the step-up
the first one cost.
Nothing else is subtracted. An owner may give an org key owner-grade scopes, because that is a decision an owner is allowed to make - and the alternative, a hidden member-level cap, meant a key that quietly did less than the dialog said. The audit entry names the acting human as actor; the key itself becomes the actor only later, on the requests it makes.
Authentifizierung
bearerAuth API token generated from the fastmon dashboard (Account → API Token) or at organization level (fmo_…, one that outlives its creator). Send as Authorization: Bearer fm_... or paste the full token (including its prefix) into the Authorize dialog.
In: header
Pfad-Parameter
uuidRequest-Body
application/json
Mint an org key. The step-up fields re-authenticate the acting human - the key itself belongs to nobody and never authenticates interactively.
Response-Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/api-keys" \ -H "Content-Type: application/json" \ -d '{ "name": "string", "scopes": [ "string" ], "expires_at": "2019-08-24T14:15:22Z" }'{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "kind": "personal", "name": "string", "prefix": "string", "last4": "string", "scopes": [], "expires_at": "2019-08-24T14:15:22Z", "last_used_at": "2019-08-24T14:15:22Z", "reach": { "scope": "string", "partner_org_id": "6d083317-c55a-4f41-82ae-8c86d8187f47", "organization_ids": [], "organization_count": 0 }, "created_at": "2019-08-24T14:15:22Z", "revoked_at": "2019-08-24T14:15:22Z", "editable": true, "key": "string"}