Creates a new API key for the authenticated user.
POST/apikeys
The response includes the FULL plaintext key value exactly once — subsequent reads return a masked version, so the consumer must capture and store the value immediately.
Request
Responses
- 200
- 400
- 401
- 403
OK
Bad Request
Unauthorized - missing or invalid credentials.
Forbidden - authenticated but missing required role or policy.