ServiceAccountKeyCreateRequest

Request to mint an API key for a service account. role is the key's scope role on the account's network (read_only/administrator); it defaults to the account's membership role and is capped at both the account's membership role and the minting admin's own role. expires_at, if given, is an ISO-8601 instant in the future.

namestringnullable

Human-readable label for the key

Example: billing-sync

rolestringnullable

The key's scope role on the account's network; defaults to the account's membership role and is capped at both that role and the minting admin's own role

Possible values: [read_only, administrator]

Example: read_only

expires_atstringnullable

Optional ISO-8601 instant in the future when the key should expire; omit for a key that never expires

Example: 2026-01-15T09:30:00Z

ServiceAccountKeyCreateRequest

{
  "name": "billing-sync",
  "role": "read_only",
  "expires_at": "2026-01-15T09:30:00Z"
}