Solo.io

Solo.io API Keys API

API key management endpoints

GitHub OpenAPI

Operations 4

GET /apps/{appID}/api-keys List app API keys #
POST /apps/{appID}/api-keys Create app API key #
DELETE /apps/{appID}/api-keys/{keyID} Delete app API key #
DELETE /api-keys/{keyID} Delete API key #

Documentation

📖
Documentation
https://docs.solo.io/gateway/latest/portal/
📖
APIReference
https://docs.solo.io/gateway/latest/portal/openapi/
📖
Documentation
https://docs.solo.io/kgateway/latest/portal/
📖
Documentation
https://docs.solo.io/agentgateway/2.3.x/llm/guardrails/webhook/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/solo-io/refs/heads/main/openapi/solo-io-api-keys-api-openapi.yml

Other Resources

🔗
SourceCode
https://github.com/solo-io/gloo-portal-idp-connect
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/solo-io/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/solo-io-api-keys-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

solo-io-api-keys-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Portal Backend API Keys API
  description: API for the gateway developer portal backend server
  version: 1.0.0
servers:
- url: /v1
  description: API v1 base path
tags:
- name: api-keys
  description: API key management endpoints
paths:
  /apps/{appID}/api-keys:
    get:
      summary: List app API keys
      description: Returns all API keys for an application (without the actual key values)
      operationId: ListAppApiKeys
      tags:
      - api-keys
      security:
      - bearerAuth: []
      - identityToken: []
      - accessToken: []
      parameters:
      - name: appID
        in: path
        description: Application ID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: List of API keys
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ApiKey'
        '401':
          description: Authentication required
        '404':
          description: App not found
        '500':
          description: Internal server error
    post:
      summary: Create app API key
      description: Creates a new API key for an application. The raw API key value is only returned once at creation time.
      operationId: CreateAppApiKey
      tags:
      - api-keys
      security:
      - bearerAuth: []
      - identityToken: []
      - accessToken: []
      parameters:
      - name: appID
        in: path
        description: Application ID
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateApiKeyRequest'
      responses:
        '201':
          description: API key created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiKeyWithSecret'
        '400':
          description: Invalid request - apiKeyName required
        '401':
          description: Authentication required
        '404':
          description: App not found
        '409':
          description: API key already exists
        '500':
          description: Internal server error
  /apps/{appID}/api-keys/{keyID}:
    delete:
      summary: Delete app API key
      description: Deletes an API key from an application
      operationId: DeleteAppApiKey
      tags:
      - api-keys
      security:
      - bearerAuth: []
      - identityToken: []
      - accessToken: []
      parameters:
      - name: appID
        in: path
        description: Application ID
        required: true
        schema:
          type: string
      - name: keyID
        in: path
        description: API Key ID
        required: true
        schema:
          type: string
      responses:
        '204':
          description: API key deleted
        '401':
          description: Authentication required
        '500':
          description: Internal server error
  /api-keys/{keyID}:
    delete:
      summary: Delete API key
      description: Deletes an API key by ID
      operationId: DeleteApiKey
      tags:
      - api-keys
      security:
      - bearerAuth: []
      - identityToken: []
      - accessToken: []
      parameters:
      - name: keyID
        in: path
        description: API Key ID
        required: true
        schema:
          type: string
      responses:
        '204':
          description: API key deleted
        '401':
          description: Authentication required
        '500':
          description: Internal server error
components:
  schemas:
    BaseEntity:
      type: object
      description: Base entity with common fields
      required:
      - id
      - createdAt
      properties:
        id:
          type: string
          description: Unique identifier
        createdAt:
          type: string
          format: date-time
          description: Timestamp when the entity was created
        updatedAt:
          type: string
          format: date-time
          description: Timestamp when the entity was last updated
    ApiKey:
      description: API key information (without the actual key value)
      allOf:
      - $ref: '#/components/schemas/BaseEntity'
      - type: object
        required:
        - appId
        - name
        properties:
          appId:
            type: string
            description: ID of the application this key belongs to
          name:
            type: string
            description: Display name for the API key
          expiresAt:
            type: string
            format: date-time
            description: Timestamp when the key expires
          metadata:
            type: object
            description: Custom metadata for the API key
            additionalProperties:
              type: string
    ApiKeyWithSecret:
      description: API key with the actual key value (only returned at creation time)
      allOf:
      - $ref: '#/components/schemas/BaseEntity'
      - type: object
        required:
        - appId
        - name
        - apiKey
        properties:
          appId:
            type: string
            description: ID of the application this key belongs to
          name:
            type: string
            description: Display name for the API key
          apiKey:
            type: string
            description: The raw API key value (only returned at creation time)
          metadata:
            type: object
            description: Custom metadata for the API key
            additionalProperties:
              type: string
    CreateApiKeyRequest:
      type: object
      description: Request body for creating an API key
      required:
      - apiKeyName
      properties:
        apiKeyName:
          type: string
          description: Display name for the API key
        metadata:
          type: object
          description: Custom metadata for the API key
          additionalProperties:
            type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Bearer token passed in the Authorization header
    identityToken:
      type: apiKey
      in: cookie
      name: id_token
      description: id_token cookie set by the identity provider after OIDC login
    accessToken:
      type: apiKey
      in: cookie
      name: access_token
      description: access_token cookie set by the identity provider after OIDC login