Docs / API / Issue a narrowed key

Issue a narrowed key

Trade your key for one limited to a single website — what an installed app holds.

2 Min. Lesezeit All plans

POST /api/v1/me/keys

This is the flow behind "which website is this site?" in the WordPress plugin and the Shopify app. They list your websites, you pick one, and the app trades your key for one that reaches that website alone.

website_id string ERFORDERLICH

The website the new key should be limited to.

name string OPTIONAL

What will hold it, so you recognise it in the key list.

HIER STARTEN Your own key is untouched — this issues a narrower one beside it. The narrow key is what a site keeps, so if that site is ever compromised it reaches one website and no others.

You need to be an admin or owner of the website. A narrowed key needs no website_id on later requests: it has already named one.

VORSICHT The new secret is in this reply and nowhere else. It is never shown again.

CURL

curl -X POST https://console.quqi.io/api/v1/me/keys \
  -H "Authorization: Bearer quqi_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "website_id": "019feda8-0ca6-70d1-b927-697fa6650cda",
    "name": "Our WordPress site"
  }'

RESPONSE 201

{
  "success": true,
  "data": {
    "api_key": "quqi_…",
    "key_id": "01a0…",
    "website": {
      "name": "Corner Bakery",
      "domain": "cornerbakery.example"
    }
  }
}

Hat diese Seite Ihre Frage beantwortet? Ja Nicht ganz