> ## Documentation Index
> Fetch the complete documentation index at: https://docs.g-tateth.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a new API key



## OpenAPI

````yaml /openapi.json post /api/tenant/api-keys
openapi: 3.0.0
info:
  title: g-tateth CRM API
  version: 1.1.0
  description: >-
    RESTful API for g-tateth CRM platform. Manage conversations, customers,
    users, and more.
  contact:
    name: g-tateth Support
    email: support@g-tateth.com
  license:
    name: Proprietary
servers:
  - url: https://api.g-tateth.com
    description: Production server
  - url: https://staging-api.g-tateth.com
    description: Staging server
security: []
tags:
  - name: Health
    description: API health and status check (no authentication required)
  - name: Authentication
    description: API key and JWT authentication
  - name: API Keys
    description: Create and manage your tenant API keys (requires JWT session)
  - name: Conversations
    description: Manage customer conversations (supports API key or JWT)
  - name: Customers
    description: Manage customer profiles (supports API key or JWT)
  - name: Webhooks
    description: Subscribe to real-time events via webhooks (supports API key or JWT)
  - name: Analytics
    description: Usage analytics and performance metrics (supports API key or JWT)
  - name: Data Privacy
    description: >-
      GDPR data rights endpoints — export, deletion, access, rectification,
      restriction, and objection requests (requires JWT session)
  - name: Widget
    description: Chat widget API endpoints (public — no authentication required)
  - name: Telephony
    description: Voice and phone API endpoints
  - name: Zoho Integration
    description: Zoho CRM integration and data import endpoints
paths:
  /api/tenant/api-keys:
    post:
      tags:
        - API Keys
      summary: Create a new API key
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - name
                - permissions
              properties:
                name:
                  type: string
                  minLength: 1
                  maxLength: 100
                  example: Production API Key
                environment:
                  type: string
                  enum:
                    - production
                    - staging
                  default: production
                permissions:
                  type: array
                  items:
                    type: string
                  example:
                    - read:conversations
                    - write:customers
                expiresAt:
                  type: string
                  format: date-time
                rotationPolicy:
                  type: object
                  properties:
                    enabled:
                      type: boolean
                    intervalDays:
                      type: integer
                    notifyDaysBefore:
                      type: integer
                rateLimit:
                  type: object
                  properties:
                    requests:
                      type: integer
                    window:
                      type: string
                      enum:
                        - 1m
                        - 5m
                        - 15m
                        - 1h
                        - 1d
                ipWhitelist:
                  type: array
                  items:
                    type: string
      responses:
        '201':
          description: API key created successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  data:
                    type: object
                    properties:
                      key:
                        type: string
                        description: The full API key (only shown once)
                      keyPrefix:
                        type: string
      security:
        - BearerAuth: []
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        JWT session token authentication. Use for user-context requests. The
        token is returned by the login endpoint and expires after 15 minutes.

````