API keys and owners

Console only: these endpoints need the session of a user signed in to the console. Api-Key and Api-Secret do not work on them, and there is no supported way to call them from your own code. They are documented to explain what the console does. The console does it for you in API keys & settings. See API keys for how to use and protect them.

Create an API key

POST /v1/databases/{databaseId}:createApiKey

1{"name": "backend"}

Response 201 Created. The secret is returned only now; store it safely:

1{"name":"backend","key":"4fdd0267-fded-4d51-b1a2-e7674e02126e","secret":"02863644-fbf9-4e57-8b64-e11ead5878ec","creation_date":"2026-10-28T06:27:03.555714157+01:00"}

Revoke an API key

POST /v1/databases/{databaseId}:deleteApiKey

1{"key": "4fdd0267-fded-4d51-b1a2-e7674e02126e"}

Response 204 No Content. Requests with that key are rejected from then on.

Add an owner

POST /v1/databases/{databaseId}:addOwner

1{"owner_id": "user-2"}

Response 200 OK with the owners:

1["owner-1","user-2"]

Remove an owner

POST /v1/databases/{databaseId}:deleteOwner

1{"owner_id": "user-2"}

Response 200 OK with the owners that remain. You cannot remove yourself.

1["owner-1"]