Docs
API keys
POST
/api-keys

The full key is in the key field of this response and is never shown again. Grant rights with scopes (an allow list), or with the permission shorthand: readwrite = every current scope, readonly = every read scope. A write scope includes reading the same resource.

Requires api_keys:write and a key with access to all profiles.

Authorization

bearerAuth
AuthorizationBearer <token>

API key starting with fh_

In: header

Header Parameters

Idempotency-Key?string

Any unique string up to 255 characters. A retry with the same key within 24 hours returns the first response instead of running again.

Lengthlength <= 255

Request Body

application/json

name*string
Length1 <= length <= 100
scopes?array<>

Rights of the key. Wins over permission

Items1 <= items
permission?string

Shorthand used when scopes is left out

Default"readwrite"
Value in"readwrite" | "readonly"
fullAccess?boolean

true = all profiles, including future ones

Defaulttrue
profileIds?array<>

Profiles the key may use when fullAccess is false

expiresAt?string

ISO 8601 timestamp

Formatdate-time

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://feedhorizon.com/api/v1/api-keys" \  -H "Content-Type: application/json" \  -d '{    "name": "string"  }'
{
  "data": {
    "id": "key_0195f0a27b3c7d4e8f5a1b2c3d4e5f60",
    "keyPrefix": "fh_aee6d4",
    "name": "Production server",
    "permission": "readwrite",
    "scopes": [
      "profiles:read"
    ],
    "fullAccess": true,
    "profileIds": [
      "prof_0195f0a27b3c7d4e8f5a1b2c3d4e5f60"
    ],
    "lastUsedAt": "2026-11-10T08:00:00.000Z",
    "expiresAt": "2026-11-10T08:00:00.000Z",
    "createdAt": "2026-11-10T08:00:00.000Z",
    "key": "string"
  }
}
{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_json",
    "message": "The body is not valid JSON",
    "docUrl": "https://feedhorizon.com/docs/api/errors#invalid_request_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "authentication_error",
    "code": "missing_api_key",
    "message": "No Authorization: Bearer header",
    "docUrl": "https://feedhorizon.com/docs/api/errors#authentication_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "permission_error",
    "code": "insufficient_scope",
    "message": "The key lacks the scope for this endpoint",
    "docUrl": "https://feedhorizon.com/docs/api/errors#permission_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "idempotency_error",
    "code": "idempotency_request_in_progress",
    "message": "The first request with this key is still running. Retry in a few seconds",
    "docUrl": "https://feedhorizon.com/docs/api/errors#idempotency_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "idempotency_error",
    "code": "idempotency_key_reused",
    "message": "The key was used for a different request. Use a new key",
    "docUrl": "https://feedhorizon.com/docs/api/errors#idempotency_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "rate_limit_error",
    "code": "rate_limited",
    "message": "Too many requests. Wait the seconds in Retry-After",
    "docUrl": "https://feedhorizon.com/docs/api/errors#rate_limit_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}
{
  "error": {
    "type": "api_error",
    "code": "internal_error",
    "message": "Something failed on our side. Retry with backoff, using the same Idempotency-Key for writes",
    "docUrl": "https://feedhorizon.com/docs/api/errors#api_error",
    "requestId": "req_m2x81a0kfd3h9s"
  }
}

List API keys GET

Newest first. The secret key itself is never returned again after creation. Requires `api_keys:read` and a key with access to all profiles.

Revoke an API key DELETE

The key stops working immediately. A key cannot revoke itself. Requires `api_keys:write` and a key with access to all profiles.