Organization API: API Keys

Create and revoke organization API keys. X-API-Key authenticates the commerce merchant API when the key carries commerce scopes; other org routes take a Bearer token.

Base URL: https://api.coritan.com/api/v1. Paths below are complete.

To try these requests in the browser, open the interactive Organization API reference.

GET /api/v1/orgs/{org_slug}/api-keys

A 200 response is a list; each item has these fields:

POST /api/v1/orgs/{org_slug}/api-keys

application/json (required)

Fields of a 201 response:

DELETE /api/v1/orgs/{org_slug}/api-keys/{key_id}

GET /api/v1/orgs/{org_slug}/mail/tenants/{tenant_id}/api-keys

POST /api/v1/orgs/{org_slug}/mail/tenants/{tenant_id}/api-keys

application/json (required)

DELETE /api/v1/orgs/{org_slug}/mail/tenants/{tenant_id}/api-keys/{key_id}

GET /api/v1/orgs/{org_slug}/staff/settings/api-keys

POST /api/v1/orgs/{org_slug}/staff/settings/api-keys

A key for the brand's own integrations. Shown once; only its hash is kept.

application/json (required)

DELETE /api/v1/orgs/{org_slug}/staff/settings/api-keys/{key_id}