OverviewAPI Reference
API Keys

List API keys

GET
/v1/api-keys

Authorization

AuthorizationBearer <token>

API key minted via POST /v1/api-keys (format mk_live_...)

In: header

Response Body

application/json

application/json

curl -X GET "https://api.mentio.dev/v1/api-keys"
{
  "data": [
    {
      "id": "string",
      "name": "string",
      "prefix": "string",
      "scope": "read",
      "createdAt": "string",
      "lastUsedAt": "string",
      "expiresAt": "string"
    }
  ]
}
{
  "error": {
    "code": "unauthorized",
    "message": "string",
    "requestId": "string",
    "retryAfterSeconds": 0
  }
}

Create an API key POST

Mint a key for this workspace. The key itself is returned once; only its hash is stored. `expiresAt` makes it stop working at an instant (a key for a contractor or a one-off script); it stays listed until revoked.

Revoke an API key DELETE

Takes effect at once on the API and within a few minutes on cached verifications.