api_key
El dominio api_key tiene 8 acciones. En la superficie meta se alcanzan todas a través de arcane_api_key; en la individual, cada una es una herramienta propia; en la dinámica se ejecutan con arcane_execute_action y el ID canónico.
Resumen
Sección titulada «Resumen»| Acción | Título | Tipo |
|---|---|---|
api_key.create | Create an API key | escritura |
api_key.delete | Delete an API key | destructiva |
api_key.get | Get an API key | lectura |
api_key.list | List API keys | lectura |
api_key.my_create | Create my API key | escritura |
api_key.my_delete | Delete my API key | destructiva |
api_key.my_list | List my API keys | lectura |
api_key.update | Update an API key | escritura |
Acciones
Sección titulada «Acciones»api_key.create
Sección titulada «api_key.create»Create an API key
Create a new API key for programmatic access
- Tipo: escritura
- Parámetros obligatorios:
name,permissions - Meta-herramienta:
arcane_api_keycon"action": "create" - Herramienta individual:
arcane_api_key_create - Ruta de Arcane:
POST /api/api-keys - ID de operación:
create-api-key - Uso: Creates a scoped key with an explicit permissions list ([{permission, environmentId?}], names from role.permissions), capped by both the caller’s and the owner’s own permissions. The secret (key, arc_…) is returned only in this answer. For a key that simply carries your own role permissions use api_key.my_create.
- Acciones relacionadas:
api_key.my_create,role.permissions,api_key.update
api_key.delete
Sección titulada «api_key.delete»Delete an API key
Delete an API key by ID
- Tipo: destructiva — exige
confirm: true - Parámetros obligatorios:
id - Meta-herramienta:
arcane_api_keycon"action": "delete" - Herramienta individual:
arcane_api_key_delete - Ruta de Arcane:
DELETE /api/api-keys/{id} - ID de operación:
delete-api-key - Uso: Revokes any key by id (from api_key.list, needs apikeys:delete) at once: anything authenticating with it starts failing. Static keys and keys an environment uses as its pairing key (isStatic/isBootstrap in api_key.get) are refused with 403.
- Acciones relacionadas:
api_key.list,api_key.my_delete
api_key.get
Sección titulada «api_key.get»Get an API key
Get details of a specific API key by ID
- Tipo: lectura
- Parámetros obligatorios:
id - Meta-herramienta:
arcane_api_keycon"action": "get" - Herramienta individual:
arcane_api_key_get - Ruta de Arcane:
GET /api/api-keys/{id} - ID de operación:
get-api-key - Uso: One key by id (from api_key.list, api_key.my_list or the create answer). Needs apikeys:read. Returns name, description, keyPrefix, owner userId, kind (scoped, or personal which carries no grants and inherits the owner’s roles), expiresAt, lastUsedAt, permissions, and isStatic/isBootstrap (true means api_key.update and api_key.delete refuse it). The secret is never shown again after creation, and an unknown id answers 404.
- Acciones relacionadas:
api_key.list,api_key.update,api_key.delete
api_key.list
Sección titulada «api_key.list»List API keys
Get a paginated list of API keys
- Tipo: lectura
- Parámetros obligatorios: ninguno
- Meta-herramienta:
arcane_api_keycon"action": "list" - Herramienta individual:
arcane_api_key_list - Ruta de Arcane:
GET /api/api-keys - ID de operación:
list-api-keys - Uso: Every API key of the instance, whoever owns it, with its grants (needs apikeys:list). Secrets are never returned. For your own keys use api_key.my_list.
- Acciones relacionadas:
api_key.get,api_key.my_list
api_key.my_create
Sección titulada «api_key.my_create»Create my API key
Create a new personal API key owned by the current user. Personal keys inherit the owner’s role permissions.
- Tipo: escritura
- Parámetros obligatorios:
name - Meta-herramienta:
arcane_api_keycon"action": "my_create" - Herramienta individual:
arcane_api_key_my_create - Ruta de Arcane:
POST /api/auth/me/api-keys - ID de operación:
create-my-api-key - Uso: Creates a personal key owned by the caller that inherits the caller’s role permissions (no permissions list). The secret is returned only once. Arcane accepts this only from a logged-in session: it needs ARCANE_USERNAME and ARCANE_PASSWORD, never works through an API key.
- Acciones relacionadas:
api_key.my_list,api_key.create
api_key.my_delete
Sección titulada «api_key.my_delete»Delete my API key
Delete one of the current user’s own API keys
- Tipo: destructiva — exige
confirm: true - Parámetros obligatorios:
id - Meta-herramienta:
arcane_api_keycon"action": "my_delete" - Herramienta individual:
arcane_api_key_my_delete - Ruta de Arcane:
DELETE /api/auth/me/api-keys/{id} - ID de operación:
delete-my-api-key - Uso: Deletes one of the caller’s own keys (IDs from api_key.my_list), session-only like api_key.my_create. api_key.delete removes any key with the apikeys:delete permission.
- Acciones relacionadas:
api_key.my_list,api_key.delete
api_key.my_list
Sección titulada «api_key.my_list»List my API keys
List API keys owned by the current user
- Tipo: lectura
- Parámetros obligatorios: ninguno
- Meta-herramienta:
arcane_api_keycon"action": "my_list" - Herramienta individual:
arcane_api_key_my_list - Ruta de Arcane:
GET /api/auth/me/api-keys - ID de operación:
list-my-api-keys - Uso: Only the keys the caller owns. Any signed-in user may call it. api_key.list shows every key of the instance.
- Acciones relacionadas:
api_key.my_create,api_key.my_delete,api_key.list
api_key.update
Sección titulada «api_key.update»Update an API key
Update an existing API key’s details
- Tipo: escritura
- Parámetros obligatorios:
id - Meta-herramienta:
arcane_api_keycon"action": "update" - Herramienta individual:
arcane_api_key_update - Ruta de Arcane:
PUT /api/api-keys/{id} - ID de operación:
update-api-key - Uso: Changes name, description or expiry, or replaces the whole permissions list (omit permissions to keep them). Grants cannot exceed your own nor the owner’s role permissions (403). Personal keys reject a permissions list (400), and static or environment-pairing keys (isStatic/isBootstrap in api_key.get) cannot be updated at all (403). Changes reach clients using the key within seconds.
- Acciones relacionadas:
api_key.get,role.permissions