Mint an API key

Create fh_live_ / fh_test_ keys with explicit scopes for agents.

Required scopes: keys:write · Base https://api.fatheron.dev

Steps

1. 1. List scope catalog

   GET /v1/api-keys/scopes
   X-API-Key: fh_live_…

   Prefer customer_facing scopes. Presets: developer_full, developer_dev, developer_support.

2. 2. Create key (secret returned once)

   POST /v1/api-keys
   X-API-Key: fh_live_…
   Content-Type: application/json
   
   {
     "label": "agent-cursor",
     "key_kind": "live",
     "scopes": [
       "builders:write",
       "aliases:write",
       "domains:write",
       "notifications:write"
     ],
     "expires_in_seconds": 3600
   }

   Store secret immediately. fh_test_ enables sandbox (dry-run mutations + sb- projects); promote with fh_live_.

Failure remediation

• portal_session_required

  Use a builders session JWT, or an existing key that already has keys:write.

• unsupported_scopes:…

  Use ids from GET /v1/api-keys/scopes.

• platform_scopes_not_allowed:…

  Drop platform:* from account keys.

• expires_at_and_expires_in_seconds_mutually_exclusive

  Send only one expiry field.

All agent recipes