Keys

Issue a JWT for a governance virtual key and delete that key.

Keys

See Overview for authentication.

Issuing a token and reading the token for an existing virtual key use the same call. The response body is the JWT string. Applications then send that JWT to the AI gateway. Deleting the key is a separate governance call.

Endpoint summary

MethodPath
POST/api/v1/virtual-key-tokens/generate
DELETE/api/v1/governance/virtual-keys/{virtualKeyId}

Issue a virtual-key token

POST /api/v1/virtual-key-tokens/generate?virtualKeyId=4591370e-cc5a-420a-a764-f2add3d70ac2
Authorization: Bearer YOUR_API_TOKEN
QueryRequiredDescription
virtualKeyIdyesGovernance virtual key UUID

There is no JSON body.

Response 200 — raw JWT text, not a JSON object:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
StatusBody
400Plain text when the key is inactive
404Plain text when the key is not found
500Error generating virtual key token: ...

Delete a virtual key

DELETE /api/v1/governance/virtual-keys/4591370e-cc5a-420a-a764-f2add3d70ac2
Authorization: Bearer YOUR_API_TOKEN

Response 204 — empty body.