Skip to Content
APIAPI Keys

API Keys

Manage API keys for programmatic access to the KeeperHub API.

Key Types

PrefixScopeUsed for
kh_OrganizationREST API, MCP server, Claude Code plugin
wfb_UserWebhook triggers

List API Keys

GET /api/api-keys

Response

{
  "data": [
    {
      "id": "key_123",
      "name": "Production Key",
      "keyPrefix": "kh_abc",
      "createdAt": "2024-01-01T00:00:00Z",
      "lastUsedAt": "2024-01-15T12:00:00Z"
    }
  ]
}

Note: The full key is never returned after creation.

Create API Key

POST /api/api-keys

Request Body

{
  "name": "My API Key"
}

Response

{
  "id": "key_123",
  "name": "My API Key",
  "key": "kh_full_api_key_here",
  "keyPrefix": "kh_full_",
  "createdAt": "2024-01-01T00:00:00Z"
}

Important: Copy the key value immediately. It will only be shown once.

Delete API Key

DELETE /api/api-keys/{keyId}

Revokes the API key. This action cannot be undone.

Response

{
  "success": true
}

Security Notes

  • Keys are hashed with SHA256 before storage
  • Only the key prefix is stored for identification
  • Anonymous users cannot create API keys
  • Revoke keys immediately if compromised
  • Use environment variables to store keys in applications
OrganizationsErrors