> ## Documentation Index > Fetch the complete documentation index at: https://docs.trypost.it/llms.txt > Use this file to discover all available pages before exploring further. # Create API key > Creates an API key for you in this workspace. `plain_token` is the key: it is shown only in this response, so store it now. With `expires_at`, the key stops working at the end of that day (UTC); without it, it never expires. ## OpenAPI ````yaml /openapi.json post /api-keys openapi: 3.1.0 info: title: TryPost API version: 2.0.0 description: >- REST API for TryPost. Authenticate with a workspace API key as a Bearer token. servers: - url: https://app.trypost.it/api description: TryPost Cloud security: - bearerAuth: [] tags: - name: Posts description: Create, read, update, delete and preview posts. - name: Post notes description: Internal notes on a post, visible to workspace members. - name: Approvals description: Approve or reject posts waiting for approval. - name: Recurrence description: Make a post repeat on a schedule. - name: Media and uploads description: Upload files and attach media to posts. - name: Social accounts description: Connected social accounts and their network-specific options. - name: Channels description: A channel's posting schedule and queue. - name: Ideas description: Ideas on the Create board. - name: Idea stages description: The groups (columns) of the ideas board. - name: Analytics description: Workspace and channel insights. - name: Labels description: Labels to organize posts and ideas. - name: Signatures description: Reusable text to append to posts. - name: Workspace description: The workspace the API key belongs to. - name: API keys description: Personal API keys for this workspace. - name: Webhooks description: Outgoing webhooks and their delivery logs. - name: Repurposes description: Automations that republish videos posted outside TryPost. - name: Platform description: Platform capabilities and content types. paths: /api-keys: post: tags: - API keys summary: Create API key description: >- Creates an API key for you in this workspace. `plain_token` is the key: it is shown only in this response, so store it now. With `expires_at`, the key stops working at the end of that day (UTC); without it, it never expires. operationId: createApiKey requestBody: required: true content: application/json: schema: type: object required: - name properties: name: type: string maxLength: 255 expires_at: type: - string - 'null' format: date description: Last day the key works, today or later. example: name: Zapier expires_at: '2026-12-31' responses: '201': description: The created key and its secret. content: application/json: schema: type: object properties: token: $ref: '#/components/schemas/ApiKey' plain_token: type: string description: >- The key to send as `Authorization: Bearer `. Shown once. example: token: id: >- 4f1d8c2b7e9a03c6d5b8e1f2a3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0 name: Zapier last_used_at: null expires_at: '2026-12-31T23:59:59+00:00' created_at: '2026-10-08T12:00:00+00:00' plain_token: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI5Y... '401': $ref: '#/components/responses/Unauthorized' '402': $ref: '#/components/responses/PaymentRequired' '403': $ref: '#/components/responses/Forbidden' '422': $ref: '#/components/responses/ValidationError' '429': $ref: '#/components/responses/TooManyRequests' components: schemas: ApiKey: type: object properties: id: type: string description: Key id (80 characters). Use it to delete the key. name: type: string last_used_at: type: - string - 'null' format: date-time description: ISO 8601, UTC. examples: - '2026-10-08T13:00:00+00:00' expires_at: type: - string - 'null' format: date-time description: ISO 8601, UTC. `null` never expires. examples: - '2026-12-31T23:59:59+00:00' created_at: type: - string - 'null' format: date-time description: ISO 8601, UTC. examples: - '2026-10-08T12:00:00+00:00' ErrorBody: type: object properties: message: type: string ValidationErrorBody: type: object properties: message: type: string errors: type: object additionalProperties: type: array items: type: string RateLimitErrorBody: type: object properties: name: type: string const: rate_limit_exceeded message: type: string examples: - Rate limit exceeded. Please retry after 30 seconds. responses: Unauthorized: description: >- Missing, invalid, revoked or expired API key. Bodies: `Unauthenticated.` (no key, or a key that is invalid or revoked), `Token expired.` (past its `expires_at`), `Token not found.` and `No workspace selected.` (the key is no longer bound to a workspace). content: application/json: schema: $ref: '#/components/schemas/ErrorBody' example: message: Unauthenticated. PaymentRequired: description: >- TryPost Cloud only: the workspace's account has no active subscription or trial. Body: `{"message": "Active subscription required."}`. content: application/json: schema: $ref: '#/components/schemas/ErrorBody' example: message: Active subscription required. Forbidden: description: >- The request is not allowed. API keys work only for workspace admins (the account owner or a member marked as admin): otherwise every request returns `Insufficient workspace permissions.`. Other bodies: `Workspace access denied.` (the key's user left the workspace) and `Personal access token required.` (an MCP OAuth token was sent) and `This action is unauthorized.` (the note belongs to another member). content: application/json: schema: $ref: '#/components/schemas/ErrorBody' ValidationError: description: Validation failed. content: application/json: schema: $ref: '#/components/schemas/ValidationErrorBody' TooManyRequests: description: 'Rate limit exceeded. Limits: 60 requests per minute per workspace.' headers: Retry-After: description: Seconds to wait before retrying. schema: type: integer content: application/json: schema: $ref: '#/components/schemas/RateLimitErrorBody' securitySchemes: bearerAuth: type: http scheme: bearer description: Workspace API key from Settings → API Keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.