Request a long-lived user scoped authentication/authorization token, useful for accessing API endpoints from non-interactive clients. These keys can be requested with an expiration Time-To-Live (TTL) value, and can be revoked. They are most suitable for non-interactive clients such as Curl and in machine-to-machine contexts where the secret API key can be kept safely in an encrypted environment variable.
This endpoint requires a valid Oauth2 JWT token to be present in the Authorization: Bearer header along with a current refresh token in the body that matches the bearer token. These tokens will be automatically available when you are logged in via the web application or the CLI. Keys generated by this endpoint cannot be used to generate new API keys.
The API key is a random identifier and there is no user-accessible data that can be extracted from them, or used to identify the application or token holder.