Chronary API Keys API
The API Keys API from Chronary — 2 operation(s) for api keys.
The API Keys API from Chronary — 2 operation(s) for api keys.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/chronary-ai:chronary-ai-api-keys-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Chronary API Keys API
version: 1.0.0
description: 'Calendar-as-a-service API for AI agents.
Manage calendars, events, and availability for AI and human agents.
All endpoints require an API key passed as a Bearer token.
**Authentication:** `Authorization: Bearer chr_sk_...` or `Authorization: Bearer chr_ak_...`
**Rate limit:** 10 requests/second per API key. Exceeds return HTTP 429.
**Quotas:** Monthly operation limits by plan — see Billing & plans and Rate limits.
**Agent bootstrap:** Custom extensions prefixed `x-agent-*` describe the self-signup flow for AI agents. These are not part of any registered OpenAPI extension — they are a Chronary convention.'
contact:
name: Chronary Support
email: support@chronary.ai
url: https://docs.chronary.ai
servers:
- url: https://api.chronary.ai
description: Production
security:
- BearerAuth: []
tags:
- name: API Keys
paths:
/v1/keys:
post:
operationId: createApiKey
summary: Create an agent-scoped API key
description: Creates a new `chr_ak_*` key scoped to a single agent. Only org-level API keys may call this endpoint. **Requires Pro plan.**
tags:
- API Keys
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/CreateScopedApiKey'
responses:
'201':
description: Scoped API key created
headers:
X-Chronary-Plan:
description: The current plan of the authenticated organization (free | pro | scale)
schema:
type: string
enum:
- free
- pro
- scale
content:
application/json:
schema:
$ref: '#/components/schemas/CreatedScopedApiKey'
'401':
description: Unauthorized — missing or invalid API key
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Plan upgrade required — feature is not available on the current plan
headers:
X-Chronary-Plan:
description: The current plan of the authenticated organization (free | pro | scale)
schema:
type: string
enum:
- free
- pro
- scale
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Resource not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: Rate limited — 10 requests per second per key exceeded
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal server error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
get:
operationId: listApiKeys
summary: List agent-scoped API keys
description: Lists scoped keys for the authenticated organization. Only org-level API keys may call this endpoint. Available on every plan, so an org that moved to Free can still see the keys it minted on Pro.
tags:
- API Keys
responses:
'200':
description: Scoped API keys
headers:
X-Chronary-Plan:
description: The current plan of the authenticated organization (free | pro | scale)
schema:
type: string
enum:
- free
- pro
- scale
content:
application/json:
schema:
$ref: '#/components/schemas/ScopedApiKeyList'
'401':
description: Unauthorized — missing or invalid API key
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Agent-scoped keys (`chr_ak_*`) cannot call this endpoint — use an org-level key
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: Rate limited — 10 requests per second per key exceeded
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal server error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/keys/{id}:
delete:
operationId: revokeApiKey
summary: Revoke an agent-scoped API key
description: Revokes a scoped key by id. Only org-level API keys may call this endpoint. Available on every plan, so an org that moved to Free can still revoke keys it minted on Pro.
tags:
- API Keys
parameters:
- schema:
type: string
example: db59cb2d-5bd6-4631-84e7-c65db55ff9f9
required: true
name: id
in: path
responses:
'204':
description: Scoped API key revoked
headers:
X-Chronary-Plan:
description: The current plan of the authenticated organization (free | pro | scale)
schema:
type: string
enum:
- free
- pro
- scale
'401':
description: Unauthorized — missing or invalid API key
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Agent-scoped keys (`chr_ak_*`) cannot call this endpoint — use an org-level key
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Resource not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: Rate limited — 10 requests per second per key exceeded
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Internal server error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
components:
schemas:
ScopedApiKey:
type: object
properties:
id:
type: string
example: db59cb2d-5bd6-4631-84e7-c65db55ff9f9
key_prefix:
type: string
example: chr_ak_0A1B2C3D4E5F6G7H
agent_id:
type: string
example: agt_01H9X4M2P5R8T6V0
label:
type:
- string
- 'null'
example: Customer A
created_at:
type: string
format: date-time
example: '2026-04-17T16:20:00.000Z'
required:
- id
- key_prefix
- agent_id
- label
- created_at
ScopedApiKeyList:
type: object
properties:
keys:
type: array
items:
$ref: '#/components/schemas/ScopedApiKey'
required:
- keys
Error:
type: object
properties:
error:
type: object
properties:
type:
type: string
example: invalid_request
message:
type: string
example: The field "name" is required.
request_id:
type: string
example: req_01H9X4M2P5R8T6V0
required_plan:
type: string
example: pro
description: 'plan_required: the plan that unlocks the feature'
feature:
type: string
description: 'plan_required: the gated feature'
metric:
type: string
description: 'quota_exceeded and count caps: the metric at its limit (a PLAN_LIMITS key, accepted by POST /v1/billing/upgrade-requests)'
limit:
type: integer
description: 'quota_exceeded and count caps: the plan''s limit for `metric`'
upgrade_url:
type: string
description: Where a human upgrades the plan
docs_url:
type: string
contact_url:
type: string
description: 'Contract-managed plans: where to contact sales'
retry_after:
type: integer
description: Seconds until the request may be retried
required:
- type
- message
- request_id
required:
- error
CreatedScopedApiKey:
allOf:
- $ref: '#/components/schemas/ScopedApiKey'
- type: object
properties:
key:
type: string
example: chr_ak_0123456789ABCDEFghijklmnopqrstuvwxyz0123456
required:
- key
CreateScopedApiKey:
type: object
properties:
agent_id:
type: string
pattern: ^agt_
label:
type: string
minLength: 1
maxLength: 100
required:
- agent_id
securitySchemes:
BearerAuth:
type: http
scheme: bearer
description: 'API key with `chr_sk_*` for org-level access or `chr_ak_*` for agent-scoped access. Pass in the Authorization header: `Authorization: Bearer chr_sk_...`'
SessionAuth:
type: apiKey
in: cookie
name: chronary_session
description: Console session JWT (HS256), issued by sign-in and sent as the `chronary_session` cookie (a Bearer JWT is also accepted). This is NOT a chr_sk_*/chr_ak_* API key — API keys are rejected with 401 on these endpoints.
x-agent-self-signup:
url: https://api.chronary.ai/v1/agent/sign-up
verify_url: https://api.chronary.ai/v1/agent/verify
restricted_key_returned: true
human_in_the_loop: otp_email
rate_limit: 5 requests per 60s per client IP
x-agent-bootstrap-script:
npx: npx @chronary/agent-init@latest
shell: https://chronary.ai/agent-init.sh
description: One-liner that performs sign-up, prompts for OTP, verifies, and creates a smoke calendar. Accepts CHRONARY_EMAIL and CHRONARY_OTP env vars for non-interactive flows.
x-llms-txt: https://docs.chronary.ai/llms.txt
x-llms-full-txt: https://docs.chronary.ai/llms-full.txt
x-mcp-server-card: https://chronary.ai/.well-known/mcp/server-card.json
x-api-catalog: https://chronary.ai/.well-known/api-catalog