Knock API keys API

openapi: 3.2.0
info:
  title: Knock Management API (mAPI) API keys API
  version: '1.0'
  description: Knock Management API (mAPI) — the resource-management surface for Knock. Programmatic CRUD over Workflows, Channels, Email Layouts, Partials, Templates, Translations, Audiences, Broadcasts, Guides, Message Types, Variables, Members, Channel Groups, Environments, Branches, Commits, and API Keys. Distinct from the runtime Knock API (api.knock.app) — mAPI lives at control.knock.app and is what powers the Knock CLI and MCP server.
  contact:
    name: Knock
    url: https://knock.app
servers:
- url: https://control.knock.app
  variables: {}
security:
- BearerAuth: []
tags:
- name: API Keys
paths:
  /v1/api_keys/exchange:
    post:
      callbacks: {}
      description: Given an authenticated service token and an environment, will exchange the service token for a secret API key that can be used to make requests to the public API.
      operationId: exchangeForApiKey
      parameters:
      - description: The environment slug.
        in: query
        name: environment
        required: true
        schema:
          example: development
          type: string
          x-struct: null
          x-validate: null
      responses:
        '200':
          content:
            application/json:
              schema:
                description: Returns an API key that can be used to make requests to the public API.
                example:
                  api_key: sk_1234567890
                properties:
                  api_key:
                    description: The secret API key exchanged from the service token.
                    type: string
                    x-struct: null
                    x-validate: null
                required:
                - api_key
                title: ExchangeForApiKeyResponse
                type: object
                x-struct: null
                x-validate: null
          description: OK
      summary: Exchange for API key
      tags:
      - API Keys
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: Knock service token (kst_...) as a Bearer token.