API Keys

Base URL: https://api.noukai.xyz/api/v1/keys

Key management requires JWT authentication. The user must be the project owner or an org admin.

Create Key

POST /keys

{
  "project_id": "project-uuid",
  "name": "Production Server",
  "environment": "live",
  "expires_at": "2027-01-01T00:00:00Z"
}

Response (201):

{
  "key": "nk_live_Ab12CdEf_your32charsecrethere1234567890ab",
  "key_id": "Ab12CdEf",
  "project_id": "project-uuid",
  "organization_id": "org-uuid",
  "environment": "live",
  "name": "Production Server",
  "created_at": "2026-05-03T...",
  "created_by": "user-uuid"
}

The key field contains the full secret and is shown only once.

List Keys

GET /keys?projectId={project_id}

Returns key metadata (no secrets). Shows key_id, name, environment, status, created_at.

Revoke Key

DELETE /keys/{key_id}

Immediately invalidates the key. Cached validations expire within 30 seconds.

Verify Key

GET /keys/verify
Authorization: Bearer nk_live_...

Returns the key's context (project, org, environment) without consuming a request. Useful for testing key validity.

Limits

• Maximum 10 active keys per project
• Returns 429 if limit exceeded when creating