A2A — Keys

The keys method namespace manages inference (ct_live_) keys. Management keys (ct_mgmt_) themselves cannot be created or revoked via the API — they are managed from the Dashboard only.

Methods

keys.list

Lists all inference keys in the workspace. Key values are never returned — only metadata.

Params:

Param	Type	Required	Description
namespace_id	string	no	Filter by namespace

Returns: Array of key metadata objects with id, name, namespace_id, namespace_slug, last_used_at, created_at, revoked.

keys.create

Creates a new inference key scoped to a namespace.

Params:

Param	Type	Required	Description
name	string	yes	Human-readable label for this key
namespace_id	string	yes	Namespace to scope the key to

Returns: Key metadata plus the key field containing the full ct_live_ value. The key is only returned once. Store it securely.

{
  "id": "key_abc123",
  "name": "prod-backend",
  "namespace_id": "ns_xyz",
  "key": "ct_live_FULL_KEY_VALUE_ONLY_SHOWN_ONCE",
  "created_at": "2026-07-21T00:00:00Z"
}

keys.revoke

Revokes an inference key immediately. Revoked keys return 401 on all subsequent requests.

Params: { "id": "key_abc123" }

Coming soon

Key expiry (expires_at), per-key rate limits, and IP allowlisting are being added to the keys API.