API Keys API

⚠️

Internal API. These endpoints power the FlowAlert dashboard and mobile app and authenticate with a session token — there is no public way to obtain one, and API keys cannot call them. Documented for transparency; may change without notice. The supported integration surface is POST /v1/events.

All endpoints require a Bearer token.

Create an API key

POST /v1/workspaces/:workspaceId/api-keys

{ "name": "WordPress Production" }

Response 201:

{
  "id": "apk_abc123",
  "name": "WordPress Production",
  "key": "fa_live_xxxxxxxxxxxxxxxxxxxxxxxx",
  "createdAt": "2026-05-11T12:00:00.000Z"
}

⚠️

The key field is only returned at creation time. Copy it immediately — it cannot be retrieved again.

List API keys

GET /v1/workspaces/:workspaceId/api-keys

Returns a list of keys with names and creation dates. The key value itself is not returned.

Delete an API key

DELETE /v1/workspaces/:workspaceId/api-keys/:id

Deletion is immediate. Any requests using this key will fail with 401 Unauthorized.

Notifications