A P I Keys
Issuing and revoking API keys.
List API keys for a user. Keys are masked after creation.
Authorization
HTTPBearer In: header
Path Parameters
Response Body
application/json
application/json
curl -X GET "https://example.com/ext/hindclaw/users/string/api-keys"[ { "id": "string", "api_key_prefix": "string", "description": "string" }]Authorization
HTTPBearer In: header
Path Parameters
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
curl -X POST "https://example.com/ext/hindclaw/users/string/api-keys" \ -H "Content-Type: application/json" \ -d '{}'{ "id": "string", "api_key": "string", "description": "string"}Authorization
HTTPBearer In: header
Path Parameters
Response Body
application/json
curl -X DELETE "https://example.com/ext/hindclaw/users/string/api-keys/string"List the caller's own API keys (masked).
Args: _auth: Authenticated principal (user only, SA rejected).
Returns: List of ApiKeyResponse with masked key prefixes.
Authorization
HTTPBearer In: header
Response Body
application/json
curl -X GET "https://example.com/ext/hindclaw/me/api-keys"[ { "id": "string", "api_key_prefix": "string", "description": "string" }]Create a new API key for the caller.
Args: req: CreateApiKeyRequest with optional description. _auth: Authenticated principal (user only, SA rejected).
Returns: ApiKeyCreateResponse with full api_key shown once.
Authorization
HTTPBearer In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
curl -X POST "https://example.com/ext/hindclaw/me/api-keys" \ -H "Content-Type: application/json" \ -d '{}'{ "id": "string", "api_key": "string", "description": "string"}Delete one of the caller's own API keys.
Scoped to the caller's user_id — cannot delete other users' keys.
Args: key_id: API key record ID. _auth: Authenticated principal (user only, SA rejected).
Authorization
HTTPBearer In: header
Path Parameters
Response Body
application/json
curl -X DELETE "https://example.com/ext/hindclaw/me/api-keys/string"