Ir al contenido

api_key

El dominio api_key tiene 8 acciones. En la superficie meta se alcanzan todas a través de arcane_api_key; en la individual, cada una es una herramienta propia; en la dinámica se ejecutan con arcane_execute_action y el ID canónico.

AcciónTítuloTipo
api_key.createCreate an API keyescritura
api_key.deleteDelete an API keydestructiva
api_key.getGet an API keylectura
api_key.listList API keyslectura
api_key.my_createCreate my API keyescritura
api_key.my_deleteDelete my API keydestructiva
api_key.my_listList my API keyslectura
api_key.updateUpdate an API keyescritura

Create an API key

Create a new API key for programmatic access

  • Tipo: escritura
  • Parámetros obligatorios: name, permissions
  • Meta-herramienta: arcane_api_key con "action": "create"
  • Herramienta individual: arcane_api_key_create
  • Ruta de Arcane: POST /api/api-keys
  • ID de operación: create-api-key
  • Uso: Creates a scoped key with an explicit permissions list ([{permission, environmentId?}], names from role.permissions), capped by both the caller’s and the owner’s own permissions. The secret (key, arc_…) is returned only in this answer. For a key that simply carries your own role permissions use api_key.my_create.
  • Acciones relacionadas: api_key.my_create, role.permissions, api_key.update

Delete an API key

Delete an API key by ID

  • Tipo: destructiva — exige confirm: true
  • Parámetros obligatorios: id
  • Meta-herramienta: arcane_api_key con "action": "delete"
  • Herramienta individual: arcane_api_key_delete
  • Ruta de Arcane: DELETE /api/api-keys/{id}
  • ID de operación: delete-api-key
  • Uso: Revokes any key by id (from api_key.list, needs apikeys:delete) at once: anything authenticating with it starts failing. Static keys and keys an environment uses as its pairing key (isStatic/isBootstrap in api_key.get) are refused with 403.
  • Acciones relacionadas: api_key.list, api_key.my_delete

Get an API key

Get details of a specific API key by ID

  • Tipo: lectura
  • Parámetros obligatorios: id
  • Meta-herramienta: arcane_api_key con "action": "get"
  • Herramienta individual: arcane_api_key_get
  • Ruta de Arcane: GET /api/api-keys/{id}
  • ID de operación: get-api-key
  • Uso: One key by id (from api_key.list, api_key.my_list or the create answer). Needs apikeys:read. Returns name, description, keyPrefix, owner userId, kind (scoped, or personal which carries no grants and inherits the owner’s roles), expiresAt, lastUsedAt, permissions, and isStatic/isBootstrap (true means api_key.update and api_key.delete refuse it). The secret is never shown again after creation, and an unknown id answers 404.
  • Acciones relacionadas: api_key.list, api_key.update, api_key.delete

List API keys

Get a paginated list of API keys

  • Tipo: lectura
  • Parámetros obligatorios: ninguno
  • Meta-herramienta: arcane_api_key con "action": "list"
  • Herramienta individual: arcane_api_key_list
  • Ruta de Arcane: GET /api/api-keys
  • ID de operación: list-api-keys
  • Uso: Every API key of the instance, whoever owns it, with its grants (needs apikeys:list). Secrets are never returned. For your own keys use api_key.my_list.
  • Acciones relacionadas: api_key.get, api_key.my_list

Create my API key

Create a new personal API key owned by the current user. Personal keys inherit the owner’s role permissions.

  • Tipo: escritura
  • Parámetros obligatorios: name
  • Meta-herramienta: arcane_api_key con "action": "my_create"
  • Herramienta individual: arcane_api_key_my_create
  • Ruta de Arcane: POST /api/auth/me/api-keys
  • ID de operación: create-my-api-key
  • Uso: Creates a personal key owned by the caller that inherits the caller’s role permissions (no permissions list). The secret is returned only once. Arcane accepts this only from a logged-in session: it needs ARCANE_USERNAME and ARCANE_PASSWORD, never works through an API key.
  • Acciones relacionadas: api_key.my_list, api_key.create

Delete my API key

Delete one of the current user’s own API keys

  • Tipo: destructiva — exige confirm: true
  • Parámetros obligatorios: id
  • Meta-herramienta: arcane_api_key con "action": "my_delete"
  • Herramienta individual: arcane_api_key_my_delete
  • Ruta de Arcane: DELETE /api/auth/me/api-keys/{id}
  • ID de operación: delete-my-api-key
  • Uso: Deletes one of the caller’s own keys (IDs from api_key.my_list), session-only like api_key.my_create. api_key.delete removes any key with the apikeys:delete permission.
  • Acciones relacionadas: api_key.my_list, api_key.delete

List my API keys

List API keys owned by the current user

  • Tipo: lectura
  • Parámetros obligatorios: ninguno
  • Meta-herramienta: arcane_api_key con "action": "my_list"
  • Herramienta individual: arcane_api_key_my_list
  • Ruta de Arcane: GET /api/auth/me/api-keys
  • ID de operación: list-my-api-keys
  • Uso: Only the keys the caller owns. Any signed-in user may call it. api_key.list shows every key of the instance.
  • Acciones relacionadas: api_key.my_create, api_key.my_delete, api_key.list

Update an API key

Update an existing API key’s details

  • Tipo: escritura
  • Parámetros obligatorios: id
  • Meta-herramienta: arcane_api_key con "action": "update"
  • Herramienta individual: arcane_api_key_update
  • Ruta de Arcane: PUT /api/api-keys/{id}
  • ID de operación: update-api-key
  • Uso: Changes name, description or expiry, or replaces the whole permissions list (omit permissions to keep them). Grants cannot exceed your own nor the owner’s role permissions (403). Personal keys reject a permissions list (400), and static or environment-pairing keys (isStatic/isBootstrap in api_key.get) cannot be updated at all (403). Changes reach clients using the key within seconds.
  • Acciones relacionadas: api_key.get, role.permissions