accesses

Create an access key

A key for one client of the access, returned ONCE in secret (ak_live_…): only its hash is kept. The client sends it as Authorization: Bearer ak_live_…. It opens this access and nothing else; the workspace API refuses it. Optional daily_credits and monthly_credits cap this key inside the access's own ceilings. Pro plan.

POST/v1/accesses/{access_id}/keys

Request

curl --request POST \
  --url 'https://api.lookio.app/v1/accesses/<access_id>/keys' \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "<string>"
}'

import json
import requests

url = "https://api.lookio.app/v1/accesses/<access_id>/keys"
headers = {
  "Authorization": "<api-key>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"name\":\"<string>\"}")

response = requests.request("POST", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://api.lookio.app/v1/accesses/<access_id>/keys", {
  method: "POST",
  headers: {
    "Authorization": "<api-key>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "name": "<string>"
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://api.lookio.app/v1/accesses/<access_id>/keys");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: <api-key>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"name\":\"<string>\"}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("POST", "https://api.lookio.app/v1/accesses/<access_id>/keys", bytes.NewBuffer([]byte("{\"name\":\"<string>\"}")))
  req.Header.Set("Authorization", "<api-key>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://api.lookio.app/v1/accesses/<access_id>/keys"))
    .header("Authorization", "<api-key>")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("{\"name\":\"<string>\"}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://api.lookio.app/v1/accesses/<access_id>/keys")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "<api-key>"
request["Content-Type"] = "application/json"
request.body = "{\"name\":\"<string>\"}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "key": {
      "id": "aky_h4n8c2v6y9tk",
      "name": "Globex",
      "prefix": "ak_live_k7f2p9x4m1c8",
      "daily_credits": 3000,
      "monthly_credits": null,
      "spent": {
        "today": 60,
        "month": 1800
      },
      "last_used_at": "2026-10-29T10:00:00.000Z",
      "created_at": "2026-10-20T10:00:00.000Z"
    },
    "secret": "ak_live_k7f2p9x4m1c8_9a3d7e1fC4b29a3d7e1fC4b29a3d7e1fC4b29a3d7e1_1f3a9c07"
  },
  "request_id": "req_01K9X7M2Q4"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

{
  "error": {
    "type": "<string>",
    "code": "<string>",
    "message": "<string>",
    "param": "<string>",
    "docs_url": "<string>",
    "action_url": "<string>"
  },
  "request_id": "<string>"
}

Authorizations

Authorizationbearerin headerrequired

Path parameters

access_idstringrequired

Header parameters

Idempotency-Keystringlength: 1–255 chars

A unique key for this request, such as a UUID, 1 to 255 visible ASCII characters. Send the same key when you retry: the first response is returned (with Idempotent-Replayed: true) instead of running the request again, for 24 hours, per credential. The same key on a different request is a 409 conflict. A streamed answer is not recorded.

Body

application/jsonrequired

namestringrequiredlength: 1–100 chars

Who it is for, e.g. the client's name.

daily_creditsinteger | null

Credits this key, per UTC day, inside the access's own ceilings, may spend; null is no ceiling. A call whose price does not fit is refused with rate_limited until the window resets.

monthly_creditsinteger | null

Credits this key, per UTC month, inside the access's own ceilings, may spend; null is no ceiling. A call whose price does not fit is refused with rate_limited until the window resets.

Response

application/json

Create an access key

dataobjectrequired

Show child attributes

data.keyobjectrequired

Show child attributes

data.key.idstringrequiredpattern: ^aky_[abcdefghjkmnpqrstuvwxyz23456789]{12}$

data.key.namestringrequired

Who the key is for.

data.key.prefixstringrequired

The start of the key (ak_live_<key id>), to recognise it. The whole key is shown once, at creation.

data.key.daily_creditsinteger | nullrequired

data.key.monthly_creditsinteger | nullrequired

data.key.spentobjectrequired

Credits spent with this key, this UTC day and month.

Show child attributes

data.key.spent.todayintegerrequired

data.key.spent.monthintegerrequired

data.key.last_used_atstringnullrequired

data.key.created_atstringrequired

data.secretstringrequired

The whole key (ak_live_…). Shown once: store it now and hand it to its client.

request_idstringrequired

curl --request POST \ --url 'https://api.lookio.app/v1/accesses/<access_id>/keys' \ --header 'Authorization: <api-key>' \ --header 'Content-Type: application/json' \ --data '{ "name": "<string>" }'

{ "data": { "key": { "id": "aky_h4n8c2v6y9tk", "name": "Globex", "prefix": "ak_live_k7f2p9x4m1c8", "daily_credits": 3000, "monthly_credits": null, "spent": { "today": 60, "month": 1800 }, "last_used_at": "2026-10-29T10:00:00.000Z", "created_at": "2026-10-20T10:00:00.000Z" }, "secret": "ak_live_k7f2p9x4m1c8_9a3d7e1fC4b29a3d7e1fC4b29a3d7e1fC4b29a3d7e1_1f3a9c07" }, "request_id": "req_01K9X7M2Q4" }

{ "error": { "type": "<string>", "code": "<string>", "message": "<string>", "param": "<string>", "docs_url": "<string>", "action_url": "<string>" }, "request_id": "<string>" }

Create an access key

Authorizations

Path parameters

Header parameters

Body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown