Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <API key>. Virtual keys, dashboard/user/session tokens, and x-api-key headers are not supported on management APIs.

Body

application/json

Create virtual key request

name
string
required
description
string
provider_configs
object[]

Provider configurations (empty means no providers allowed, deny-by-default)

mcp_configs
object[]

MCP configurations (empty means no MCP tools allowed, deny-by-default)

team_id
string
customer_id
string
budgets
object[]

Budget quotas assigned directly to this virtual key

rate_limit
object

Create rate limit request

is_active
boolean
calendar_aligned
boolean
default:false
expires_at
string<date-time>

Optional expiry timestamp. Must be in the future. Omit for a key that never expires.

Response

Virtual key created successfully

Virtual key operation response

message
string
required
virtual_key
object
required

Virtual key configuration