Management keys

Provision and revoke gateway API keys programmatically. Management keys (tg_mgmt_…) authenticate against the /v1/keys endpoints — treat them like admin credentials. Create one under Dashboard → API Keys.

Authentication

Pass the management key as a bearer token: Authorization: Bearer tg_mgmt_…. An invalid or revoked key returns 401.

List keys

bash

curl https://gateway.hacktigerlabs.com/v1/keys \
  -H "Authorization: Bearer tg_mgmt_..."

# → { "data": [ { "id", "name", "key_prefix", "last4", "revoked", "created_at", "last_used_at" } ] }

Create a gateway key

The raw key is returned once — store it immediately.

bash

curl -X POST https://gateway.hacktigerlabs.com/v1/keys \
  -H "Authorization: Bearer tg_mgmt_..." \
  -H "Content-Type: application/json" \
  -d '{ "name": "ci-production" }'

# → 201 { "id": "...", "name": "ci-production", "key": "tg_live_..." }

Revoke a key

bash

curl -X DELETE https://gateway.hacktigerlabs.com/v1/keys/{id} \
  -H "Authorization: Bearer tg_mgmt_..."

# → { "id": "...", "revoked": true }