curl --request POST \
  --url https://app.thinnest.ai/api/v1/customers/{id}/keys \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Sunrise front-desk dashboard",
  "scope": "read"
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({name: 'Sunrise front-desk dashboard', scope: 'read'})
};

fetch('https://app.thinnest.ai/api/v1/customers/{id}/keys', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://app.thinnest.ai/api/v1/customers/{id}/keys"

payload = {
    "name": "Sunrise front-desk dashboard",
    "scope": "read"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "id": "0c7e4a92-3d1b-4f6a-8e25-91b7c3d4f5a6",
  "name": "Sunrise front-desk dashboard",
  "prefix": "ta_live_Xk3pQ9",
  "scope": "read",
  "createdAt": "2026-10-06T10:12:45.330Z",
  "lastUsedAt": null,
  "revokedAt": null,
  "key": "ta_live_Xk3pQ9vLr2mT7yHc4bN8sJd1Wq6Ez0aUo5iKf3gPxRt"
}

{
  "error": "`name` is 2-80 characters, so you know what to revoke later."
}

{
  "error": "Send a valid API key as `Authorization: Bearer <key>`."
}

{
  "error": "This API key is read-only: it can read everything but change nothing."
}

{
  "error": "Customer not found."
}

{
  "error": "This workspace resells the console under white label: its workspaces are clients, managed in White label → Clients, not API customers."
}

{
  "error": "Over 240 requests a minute. Slow down and retry."
}