> ## Documentation Index
> Fetch the complete documentation index at: https://docs.niadra.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Criar chave

> Uma chave de fonte com escopos. O segredo aparece uma vez só.



## OpenAPI

````yaml openapi/pt/control.json POST /v1/sources/{source_id}/keys
openapi: 3.1.0
info:
  title: API de controle da Niadra
  version: '1'
  description: >-
    Tenants, projetos, fontes, chaves, pessoas, configuração e uso. Nunca recebe
    conteúdo de cliente.
servers:
  - url: https://control.api.niadra.com
security: []
paths:
  /v1/sources/{source_id}/keys:
    post:
      summary: Criar chave
      description: >-
        Emite uma chave para a fonte. Sem `scopes`, os escopos seguem a
        audiência da fonte. O segredo volta uma vez só; a Niadra guarda apenas
        dois hashes dele. Exige o papel admin.


        **Autenticação.** Token de pessoa emitido pelo controle (`Authorization:
        Bearer <JWT>`), com o papel que a operação pede.
      operationId: issue_key_v1_sources__source_id__keys_post
      parameters:
        - in: path
          name: source_id
          required: true
          schema:
            format: uuid
            title: Source Id
            type: string
          example: 0192f0a0-5f60-7172-8d83-9e0f1a2b3c45
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/KeyCreate'
            example:
              scopes:
                - context
                - search
                - track
                - act
        required: true
      responses:
        '201':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssuedKeyOut'
              example:
                key:
                  key_id: k7Q2mX9a
                  source_id: 0192f0a0-5f60-7172-8d83-9e0f1a2b3c45
                  scopes:
                    - context
                    - search
                    - track
                    - act
                  status: active
                  created_at: '2026-09-22T12:00:00Z'
                  expires_at: null
                  revoked_at: null
                secret: >-
                  nia_sk_live_us-east-1_acme-prod_k7Q2mX9a_Vh3pL9sQ2rT8wZ4yB6nD1fG5
          description: A chave e o segredo dela, mostrado só desta vez.
        '422':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/Problem'
          description: O pedido não bate com o contrato.
      security:
        - personToken: []
components:
  schemas:
    KeyCreate:
      additionalProperties: false
      properties:
        scopes:
          anyOf:
            - items:
                $ref: '#/components/schemas/Scope'
              type: array
            - type: 'null'
          description: Por padrão, os escopos seguem a audiência da fonte.
          title: Scopes
      title: KeyCreate
      type: object
    IssuedKeyOut:
      additionalProperties: false
      properties:
        key:
          $ref: '#/components/schemas/KeyOut'
        secret:
          description: >-
            A chave completa. Aparece uma vez só; a Niadra guarda apenas dois
            hashes dela.
          title: Secret
          type: string
      required:
        - key
        - secret
      title: IssuedKeyOut
      type: object
    Problem:
      additionalProperties: false
      description: >-
        Detalhes do problema no formato da RFC 9457; `code` vem do catálogo de
        erros versionado.
      properties:
        code:
          title: Code
          type: string
        detail:
          anyOf:
            - type: string
            - type: 'null'
          default: null
          title: Detail
        request_id:
          anyOf:
            - type: string
            - type: 'null'
          default: null
          title: Request Id
        status:
          title: Status
          type: integer
        title:
          title: Title
          type: string
        type:
          default: about:blank
          title: Type
          type: string
      required:
        - title
        - status
        - code
      title: Problem
      type: object
    Scope:
      enum:
        - track
        - act
        - context
        - search
        - identify
        - admin
        - analytics
      title: Scope
      type: string
    KeyOut:
      additionalProperties: false
      properties:
        created_at:
          format: date-time
          title: Created At
          type: string
        expires_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Expires At
        key_id:
          title: Key Id
          type: string
        revoked_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Revoked At
        scopes:
          items:
            $ref: '#/components/schemas/Scope'
          title: Scopes
          type: array
        source_id:
          format: uuid
          title: Source Id
          type: string
        status:
          $ref: '#/components/schemas/KeyStatus'
      required:
        - key_id
        - source_id
        - scopes
        - status
        - created_at
        - expires_at
        - revoked_at
      title: KeyOut
      type: object
    KeyStatus:
      enum:
        - active
        - revoked
      title: KeyStatus
      type: string
  securitySchemes:
    personToken:
      type: http
      scheme: bearer
      bearerFormat: JWT

````