Manage API Keys - Kyma API

Creating, disabling and deleting keys takes a dashboard session token (ks-…) in Authorization: Bearer. An API key gets 403 with session_required, so a leaked key cannot mint new keys or switch off yours. Listing keys takes either credential.

Create key

POST https://kymaapi.com/v1/auth/keys

string

Key name (e.g. “production”). Defaults to "default" when omitted.

Response

{ "api_key": "kyma-new-key-here", "name": "production" }

List keys

GET https://kymaapi.com/v1/auth/keys Newest key first (created_at descending). Each key carries its lifetime spend. Secrets are returned in full to a session token and masked (kyma-a…b1c2) to a caller authenticated with an API key.

Response

{
  "keys": [
    {
      "key": "kyma-xxx...xxx",
      "name": "default",
      "created_at": "2026-04-05T00:00:00Z",
      "last_used": "2026-09-05T12:00:00Z",
      "request_count": 42,
      "enabled": true,
      "is_default": true,
      "usage_cost": 1.2345,
      "usage_requests": 42
    }
  ]
}

Disable or enable a key

PATCH https://kymaapi.com/v1/auth/keys/{key}/toggle

boolean

required

true enables the key. Any other value, or a missing field, disables it.

A disabled key stops authenticating at once.

Response

{ "message": "Key disabled", "enabled": false }

Delete key

DELETE https://kymaapi.com/v1/auth/keys/{key} Any key can be deleted, including the one marked is_default. Deleting the default promotes your newest enabled key in its place; if no enabled key is left, a new default key is created for you. The response names the key that is default afterwards, masked.

Response

{ "message": "Key deleted", "new_default": "kyma-a…b1c2", "new_default_created": false }

An account always has a default key. new_default_created is true when the delete left none and one was issued for you.

A key that is not yours, or does not exist, answers 400 with {"error": {"message": "Key not found", "reason": "not_found"}}.

​Create key

​List keys

​Disable or enable a key

​Delete key

Create key

List keys

Disable or enable a key

Delete key