You and your keys

Create a personal API key for this app

Mints a key that acts as you, in this app, with at most the permissions you already have, a key can never do more than the user who made it.

POST/v1/me/keys

Request

curl --request POST \
  --url 'https://your-suite.gtable.app/your-app/v1/me/keys' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "<string>",
  "scopes": [
    "<string>"
  ]
}'

import json
import requests

url = "https://your-suite.gtable.app/your-app/v1/me/keys"
headers = {
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")

response = requests.request("POST", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://your-suite.gtable.app/your-app/v1/me/keys", {
  method: "POST",
  headers: {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "name": "<string>",
    "scopes": [
      "<string>"
    ]
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://your-suite.gtable.app/your-app/v1/me/keys");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("POST", "https://your-suite.gtable.app/your-app/v1/me/keys", bytes.NewBuffer([]byte("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}")))
  req.Header.Set("Authorization", "Bearer <token>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://your-suite.gtable.app/your-app/v1/me/keys"))
    .header("Authorization", "Bearer <token>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://your-suite.gtable.app/your-app/v1/me/keys")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer <token>"
request["Content-Type"] = "application/json"
request.body = "{\"name\":\"<string>\",\"scopes\":[\"<string>\"]}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "id": "<string>",
    "kind": "key",
    "name": "<string>",
    "keyId": "<string>",
    "scopes": [
      "<string>"
    ],
    "clientId": null,
    "appIds": [
      "<string>"
    ],
    "createdAt": "<string>",
    "expiresAt": null,
    "lastUsedAt": null,
    "key": "<string>"
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}

Only from a signed-in browser: a key or a connected agent cannot mint another. Expires in 90 days unless you choose otherwise; expiresInDays: null lives until revoked. The key is returned once and never stored in clear.

Any valid credential for this API: no scope is needed. Operation me.keys.create. Not an MCP tool: keys are made by a person in a signed-in browser. CLI, once published: gtable me keys create.

Headers

Name	Type	Required	Description
`Idempotency-Key`	string	no	Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters.

Request body

Field	Type	Required	Description
`name`	string	yes	Up to 120 characters.
`scopes`	string[]	yes
`expiresInDays`	integer or null	no

Response

application/json

Success

dataobjectrequired

Show child attributes

idstringrequired

kindstringrequired

namestringrequired

keyIdstringrequired

scopesstring[]required

clientIdstringnullrequired

appIdsstring[] | nullrequired

createdAtstringrequired

expiresAtstringnullrequired

lastUsedAtstringnullrequired

keystringrequired

curl --request POST \ --url 'https://your-suite.gtable.app/your-app/v1/me/keys' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "name": "<string>", "scopes": [ "<string>" ] }'

{ "data": { "id": "<string>", "kind": "key", "name": "<string>", "keyId": "<string>", "scopes": [ "<string>" ], "clientId": null, "appIds": [ "<string>" ], "createdAt": "<string>", "expiresAt": null, "lastUsedAt": null, "key": "<string>" } }

Create a personal API key for this app

Headers

Request body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown