Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
All 92 tools →
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/nylas-manage-api-keys-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Nylas Manage API keys API
version: v3
summary: The complete Nylas v3 API — Email, Calendar, Contacts, Notetaker, Scheduling, Administration, and Migration.
description: The Nylas API is designed using the REST ideology to provide simple and predictable URIs to access and modify objects.
contact:
url: https://www.nylas.com/
x-provenance:
method: harvested
first_party: true
publisher: Nylas
source: https://developer.nylas.com/_spec-files/nylas-api.yaml
harvested: '2026-08-21'
sha256: 7ff001d571e163b1ffe22178741b59f813d8208ec878157a839a33dc2c13fd35
bytes: 1666223
note: 'Published by Nylas as the unified contract for the Nylas v3 API and stored verbatim; API Evangelist added only this provenance block. Submitted by the provider in api-evangelist/nylas#1 and verified against the live URL before harvest: OpenAPI 3.1.0, 118 paths, 208 operations, 174 component schemas, 100% of operations carrying summary, description, tag and a unique operationId, x-code-samples on 208 of 208. This document REPLACES a 22-operation scaffold API Evangelist derived from reading the documentation, now quarantined under openapi/_scaffold/.'
x-evidence:
- url: https://developer.nylas.com/_spec-files/nylas-api.yaml
what: the published unified contract, harvested verbatim 2026-08-21 (200, text/yaml, 1,666,223 bytes)
- url: https://developer.nylas.com/.well-known/api-catalog
what: RFC 9727 linkset advertising that URL as service-desc for api.us.nylas.com and api.eu.nylas.com (200, application/linkset+json)
servers:
- url: https://api.us.nylas.com
description: U.S.
- url: https://api.eu.nylas.com
description: E.U.
security:
- ACCESS_TOKEN: []
- NYLAS_API_KEY: []
tags:
- name: Manage API keys
description: The Manage API Keys endpoints let you create, list, and delete API keys from your Nylas application outside of the Nylas Dashboard.
paths:
/v3/admin/applications/{application_id}/api-keys:
parameters:
- in: path
schema:
type: string
name: application_id
required: true
description: ID of the Nylas application to access.
- in: header
name: X-Nylas-Signature
schema:
type: string
required: true
description: 'A Base64-encoded signature using your private key''s RSA with a 2048-bit key and an SHA-256 hashed
string of the path, method, timestamp, nonce, and payload.'
- in: header
name: X-Nylas-Kid
schema:
type: string
required: true
description: The `private_key_id` from your Service Account JSON file.
- in: header
name: X-Nylas-Nonce
schema:
type: string
required: true
description: 'A randomly generated nonce. Each request needs to have a unique nonce. If you try to reuse a
nonce, Nylas rejects the request.'
- in: header
name: X-Nylas-Timestamp
schema:
type: number
required: true
description: 'The time when you submit your request, in seconds using the Unix timestamp format. This timestamp should fall within
a 5-minute window of your real request time.'
post:
summary: Create API key
tags:
- Manage API keys
operationId: create-api-key
x-beta: true
description: '⚠️ Before you can use the Manage API Keys endpoints, you need to create a Nylas Service Account.
Creates an API key for the specified Nylas application.'
requestBody:
content:
application/json:
schema:
type: object
properties:
name:
type: string
description: A short, descriptive name for the API key.
example: example-key
expires_in:
type: number
description: How long the API key will be valid, in days.
example: 3600
x-code-samples:
- lang: bash
label: cURL
source: "curl -X POST \"https://api.us.nylas.com/v3/admin/applications/<NYLAS_APPLICATION_ID>/api-keys\" \\\n -H \"Content-Type: application/json\" \\\n -H \"X-Nylas-Signature: <BASE64_SIGNATURE>\" \\\n -H \"X-Nylas-Kid: <SERVICE_ACCOUNT_ID>\" \\\n -H \"X-Nylas-Nonce: <NONCE>\" \\\n -H \"X-Nylas-Timestamp: 1676412353123\" \\\n -d '{\n \"name\": \"example-key\",\n \"expires_in\": 3600\n }'"
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
request_id:
type: string
description: ID of the request.
example: 5fa64c92-e840-4357-86b9-2aa364d35b88
data:
type: object
properties:
api_key:
type: string
description: The API key.
example: <NYLAS_API_KEY>
application_id:
type: string
description: The application ID associated with the API key.
example: ad410018-d306-43f9-8361-fa5d7b2172e0
created_at:
type: number
description: When the API key was created, in seconds using the Unix timestamp format.
example: 1742932766
expires_at:
type: number
description: When the API key will expire, in seconds using the Unix timestamp format.
example: 1753300766
id:
type: string
description: The API key ID.
example: <NYLAS_API_KEY_ID>
name:
type: string
description: The name of the API key.
example: example-key
permissions:
type: array
description: The scopes assigned to the API key.
example:
- apikey.create
- apikey.get
- apikey.delete
status:
type: string
description: The status of the API key.
example: active
updated_at:
type: number
description: 'When the API key was last updated, in seconds using the Unix timestamp format. For new API keys,
this value is the same as `created_at`.'
example: 1742932766
'400':
$ref: '#/components/responses/400'
'401':
$ref: '#/components/responses/401'
'429':
$ref: '#/components/responses/429'
security:
- NYLAS_API_KEY: []
- ACCESS_TOKEN: []
get:
summary: Get all API keys
tags:
- Manage API keys
operationId: get-api-keys
x-beta: true
description: '⚠️ Before you can use the Manage API Keys endpoints, you need to create a Nylas Service Account.
Returns a list of API keys associated with the specified Nylas application.'
x-code-samples:
- lang: bash
label: cURL
source: "curl -X GET \"https://api.us.nylas.com/v3/admin/applications/<NYLAS_APPLICATION_ID>/api-keys\" \\\n -H \"Content-Type: application/json\" \\\n -H \"X-Nylas-Signature: <BASE64_SIGNATURE>\" \\\n -H \"X-Nylas-Kid: <SERVICE_ACCOUNT_ID>\" \\\n -H \"X-Nylas-Nonce: <NONCE>\" \\\n -H \"X-Nylas-Timestamp: 1676412353123\""
responses:
'200':
$ref: '#/components/responses/get-api-keys-200'
'400':
$ref: '#/components/responses/400'
'401':
$ref: '#/components/responses/401'
'429':
$ref: '#/components/responses/429'
security:
- NYLAS_API_KEY: []
- ACCESS_TOKEN: []
/v3/admin/applications/{application_id}/api-keys/{api_key_id}:
parameters:
- schema:
type: string
name: application_id
in: path
required: true
description: ID of the Nylas application to access.
- schema:
type: string
name: api_key_id
in: path
required: true
description: ID of the API key to access.
- in: header
name: X-Nylas-Signature
schema:
type: string
required: true
description: 'A Base64-encoded signature using your private key''s RSA with a 2048-bit key and an SHA-256 hashed
string of the path, method, timestamp, nonce, and payload.'
- in: header
name: X-Nylas-Kid
schema:
type: string
required: true
description: The `private_key_id` from your Service Account JSON file.
- in: header
name: X-Nylas-Nonce
schema:
type: string
required: true
description: 'A randomly generated nonce. Each request needs to have a unique nonce. If you try to reuse a
nonce, Nylas rejects the request.'
- in: header
name: X-Nylas-Timestamp
schema:
type: number
required: true
description: 'The time when you submit your request, in seconds using the Unix timestamp format. This timestamp should fall within
a 5-minute window of your real request time.'
get:
summary: Get API key
tags:
- Manage API keys
operationId: get-api-key
x-beta: true
description: '⚠️ Before you can use the Manage API Keys endpoints, you need to create a Nylas Service Account.
Returns the specified API key.'
x-code-samples:
- lang: bash
label: cURL
source: "curl -X GET \"https://api.us.nylas.com/v3/admin/applications/<NYLAS_APPLICATION_ID>/api-keys/<API_KEY_ID>\" \\\n -H \"Content-Type: application/json\" \\\n -H \"X-Nylas-Signature: <BASE64_SIGNATURE>\" \\\n -H \"X-Nylas-Kid: <SERVICE_ACCOUNT_ID>\" \\\n -H \"X-Nylas-Nonce: <NONCE>\" \\\n -H \"X-Nylas-Timestamp: 1676412353123\""
responses:
'200':
$ref: '#/components/responses/get-api-key-200'
'400':
$ref: '#/components/responses/400'
'401':
$ref: '#/components/responses/401'
'429':
$ref: '#/components/responses/429'
security:
- NYLAS_API_KEY: []
- ACCESS_TOKEN: []
delete:
summary: Delete API key
tags:
- Manage API keys
operationId: delete-api-key
x-beta: true
description: '⚠️ Before you can use the Manage API Keys endpoints, you need to create a Nylas Service Account.
Deletes the specified API key.'
x-code-samples:
- lang: bash
label: cURL
source: "curl --location --globoff --request DELETE \"https://api.us.nylas.com/v3/admin/applications/<NYLAS_APPLICATION_ID>/api-keys/<API_KEY_ID>\" \\\n --header \"Content-Type: application/json\" \\\n --header \"X-Nylas-Kid: <SERVICE_ACCOUNT_ID>\" \\\n --header \"X-Nylas-Nonce: <NONCE>\" \\\n --header \"X-Nylas-Timestamp: 1676412353123\" \\\n --header \"X-Nylas-Signature: <BASE64_SIGNATURE>\""
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
request_id:
type: string
description: ID of the request.
examples:
OK:
value:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
'400':
$ref: '#/components/responses/400'
'401':
$ref: '#/components/responses/401'
'429':
$ref: '#/components/responses/429'
security:
- NYLAS_API_KEY: []
- ACCESS_TOKEN: []
components:
responses:
'429':
description: Rate Limit
content:
application/json:
schema:
title: error
type: object
properties:
request_id:
type: string
description: The request ID.
error:
type: object
description: The response error object.
properties:
type:
type: string
description: The error type.
message:
type: string
description: The error message.
examples:
Not Found:
value:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
error:
type: rate_limit_error
message: Too many requests, please try again shortly.
get-api-key-200:
description: OK
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/common_response'
- properties:
data:
type: object
properties:
application_id:
type: string
description: The ID of the application the API key is associated with.
created_at:
type: number
description: When the API key was created, in seconds using the Unix timestamp format.
expires_at:
type: number
description: When the API key will expire, in seconds using the Unix timestamp format.
expires_in:
type: number
description: How long the API key is valid, in seconds.
id:
type: string
description: The API key ID.
name:
type: string
description: The name of the API key.
permissions:
type: array
descriptions: An array of permissions associated with the API key.
status:
type: string
description: The status of the API key.
updated_at:
type: number
description: When the API key was last updated, in seconds using the Unix timestamp format.
example:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
data:
application_id: ad410018-d306-43f9-8361-fa5d7b2172e0
created_at: 1617817109
expires_at: 1619385186
expires_in: 3600
name: Leyah's API key
permissions:
- all
status: active
updated_at: 1617817109
get-api-keys-200:
description: OK
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/common_response'
- properties:
data:
type: array
properties:
api_key:
type: object
description: The API key.
properties:
application_id:
type: string
description: The ID of the application the API key is associated with.
created_at:
type: number
description: When the API key was created, in seconds using the Unix timestamp format.
expires_at:
type: number
description: When the API key will expire, in seconds using the Unix timestamp format.
expires_in:
type: number
description: How long the API key is valid, in seconds.
id:
type: string
description: The API key ID.
name:
type: string
description: The name of the API key.
permissions:
type: array
descriptions: An array of permissions associated with the API key.
status:
type: string
description: The status of the API key.
updated_at:
type: number
description: When the API key was last updated, in seconds using the Unix timestamp format.
example:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
data:
api_key:
application_id: ad410018-d306-43f9-8361-fa5d7b2172e0
created_at: 1617817109
expires_at: 1619385186
expires_in: 3600
name: Leyah's API key
permissions:
- all
status: active
updated_at: 1617817109
'401':
description: Unauthorized
content:
application/json:
schema:
title: error
type: object
properties:
request_id:
type: string
description: The request ID.
error:
type: object
description: The response error object.
properties:
type:
type: string
description: The error type.
message:
type: string
description: The error message.
provider_error:
type: object
description: The error from the provider.
examples:
Unauthorized:
value:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
error:
type: unauthorized
message: Unauthorized
provider_error:
code: 401
message: Request had invalid authentication credentials. Expected OAuth 2 access token, login cookie or other valid authentication credential.
'400':
description: Bad Request
content:
application/json:
schema:
title: error
type: object
properties:
request_id:
type: string
description: The request ID.
error:
type: object
description: The response error object.
properties:
type:
type: string
description: The error type.
message:
type: string
description: The error message.
provider_error:
type: object
description: The error from the provider.
examples:
Bad Request:
value:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
error:
type: invalid_request_error
message: error parsing request body
provider_error:
code: TargetIdShouldNotBeMeOrWhitespace
message: Id is malformed.
Invalid Idempotency-Key:
value:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
error:
type: api.invalid_idempotency_key
message: Idempotency-Key must be 256 characters or fewer.
schemas:
common_response:
properties:
request_id:
type: string
description: The request ID.
data:
type: object
description: The response object.
example:
request_id: 5fa64c92-e840-4357-86b9-2aa364d35b88
securitySchemes:
ACCESS_TOKEN:
scheme: bearer
type: http
bearerFormat: NYLAS_ACCESS_TOKEN
description: 'The Nylas **access token** for a specific grant. Issued as part of OAuth 2.1 flow token
exchange.'
NYLAS_API_KEY:
scheme: bearer
type: http
bearerFormat: NYLAS_API_KEY
description: 'The Nylas **API key** provides application-level access to APIs and all grants. You can
generate these from the Dashboard. Learn more about [authorizing requests](/docs/v3/auth/).'
SCHEDULER_SESSION_TOKEN:
scheme: bearer
type: http
bearerFormat: Session ID
description: The Nylas Scheduler **session ID** that Scheduler UI Components use to authorize API requests.