Skip to main content
Mint a new federated API key under an existing group. The key inherits the group’s effective model set and limits; the request body does not configure either on the key. The plaintext key is returned exactly once in the response and is unrecoverable afterward.

Authentication

string
required
Workspace API key with management scope, passed as Authorization: Api-Key $BASETEN_API_KEY (or Bearer; both are accepted).

Path parameters

string
required
Internal Baseten ID of the group to mint the key under. Returned as id from Create a group.

Body

string
Display name for the key. Useful for distinguishing multiple keys under the same group.

Response

string
required
The plaintext key, formatted prefix.secret. Returned exactly once. Hand this to the downstream consumer immediately and store it securely on their side. Baseten does not store the secret portion and cannot show it again.
string
required
The substring before the . in api_key. Use the prefix (not the full key) as the path parameter in every per-key URL.
string
Echoes the request name. null if no name was provided.

Errors