WSO2 API Keys API

The API Keys API from WSO2 — 16 operation(s) for api keys.

Business capability
Developer Identity & Credential Management BC-4270.40

Operations 16

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api-keys List every API key as an admin · Get all API Keys #
Ask an LLM
“Can an admin see all the API keys issued across the WSO2 API Manager?”
“Where do I get a full inventory of API keys in the admin portal?”
Tell an agent
List all API keys issued in the platform from the admin view.
Show me every API key across all APIs and applications.
POST /api-keys/revoke Revoke any API key as an admin · Revoke an API Key #
Ask an LLM
“How does an administrator revoke someone's API key without going through the API or application?”
“Can I kill a leaked API key from the admin console using only its UUID?”
Tell an agent destructive · confirm first
As admin, revoke API key {keyUUID}.
Use the admin endpoint to revoke the leaked key {keyUUID}.
POST /apis/{apiId}/api-keys/generate Generate an API key bound to one API · Generate API Key #
Ask an LLM
“How do I generate a self-contained API key that works only for a single API?”
“Can I set a validity period when generating a key directly for an API?”
Tell an agent
Generate an API key for API {apiId}.
Create an API-bound key named {keyName} for API {apiId} valid for {validityPeriod} seconds.
POST /apis/{apiId}/api-keys/regenerate Regenerate an API-bound API key · Regenerate API Key #
Ask an LLM
“How do I rotate an API key that was issued directly for an API?”
“Can I regenerate an API-scoped key instead of creating a brand-new one?”
Tell an agent
Regenerate API key {keyUUID} on API {apiId}.
Rotate the API-bound key {keyUUID} for API {apiId}.
GET /apis/{apiId}/api-keys List API keys bound to an API · Get API Key(s) of a Given API #
Ask an LLM
“Which self-contained keys have been generated directly for a given API?”
“What API-bound keys exist on this API right now?”
Tell an agent
List the API-bound keys for API {apiId}.
Show me the keys generated directly on API {apiId}.
POST /apis/{apiId}/api-keys/revoke Revoke an API-bound API key · Revoke API Key #
Ask an LLM
“How do I revoke a key that was generated for a specific API rather than an application?”
“Can an API owner disable one of the API's own keys?”
Tell an agent destructive · confirm first
Revoke API-bound key {keyUUID} on API {apiId}.
Disable the key {keyUUID} that was generated for API {apiId}.
POST /apis/{apiId}/api-keys/associate Link an API-bound key to an application · Create an association for the API Key #
Ask an LLM
“Can I attach a key generated on an API to an application from the API side?”
“How do I associate an API's own key with a particular application?”
Tell an agent
On API {apiId}, associate key {keyUUID} with application {applicationUUID}.
From API {apiId}, link its key {keyUUID} to app {applicationUUID}.
POST /apis/{apiId}/api-keys/dissociate Unlink an API-bound key from its application · Remove an Association for the API Key #
Ask an LLM
“How do I detach an API's key from the application it was linked to, working from the API side?”
“Can I remove a key association on an API without revoking the key?”
Tell an agent
On API {apiId}, remove the association for key {keyUUID}.
Detach API {apiId}'s key {keyUUID} from its application.
POST /applications/{applicationId}/api-keys/{keyType}/generate Generate an application API key · Generate API Key #
Ask an LLM
“How do I generate a production or sandbox API key for my application?”
“Can I name an application API key and give it an expiry when I create it?”
Tell an agent
Generate a {keyType} API key for application {applicationId}.
Create an app key named {keyName} for application {applicationId} in {keyType}, valid {validityPeriod} seconds.
POST /applications/{applicationId}/api-keys/{keyType}/regenerate Regenerate an application API key · Regenerate API Key #
Ask an LLM
“How do I rotate one of my application's production keys?”
“Can I regenerate an application key by its UUID instead of making a new one?”
Tell an agent
Regenerate application key {keyUUID} for app {applicationId} in {keyType}.
Rotate the {keyType} app key {keyUUID} of application {applicationId}.
GET /applications/{applicationId}/api-keys/{keyType} List an application's API keys by type · Get API Key(s) of a Given Type #
Ask an LLM
“What sandbox keys does my application currently have?”
“Where can I see all the production API keys issued for an application?”
Tell an agent
List the {keyType} API keys of application {applicationId}.
Show application {applicationId}'s keys for the {keyType} environment.
POST /applications/{applicationId}/api-keys/{keyType}/revoke Revoke an application API key · Revoke API Key #
Ask an LLM
“How do I revoke a sandbox key that belongs to my application?”
“Can I revoke an application key by pasting the key value itself?”
Tell an agent destructive · confirm first
Revoke application key {keyUUID} for app {applicationId} in {keyType}.
Revoke the {keyType} key value {apikey} on application {applicationId}.
GET /applications/{applicationId}/api-keys/{keyType}/subscriptions List subscribed APIs holding unlinked keys · Get Subscribed APIs with API Key(s) of a Given Type #
Ask an LLM
“Which of my application's subscribed APIs have keys that are not yet associated with it?”
“What subscribed APIs carry API keys I could still link to my app?”
Tell an agent
List subscribed APIs with unassociated {keyType} keys for application {applicationId}.
Show which APIs application {applicationId} subscribes to that have {keyType} keys available to associate.
POST /applications/{applicationId}/api-keys/{keyType}/associate Associate an API key with my application · Associate an API Key to the Application #
Ask an LLM
“How do I link a key from a subscribed API to my application?”
“Can an application developer pull an API's key into their own app?”
Tell an agent
Associate key {keyUUID} from API {apiUUID} with application {applicationId} in {keyType}.
Link API {apiUUID}'s key {keyUUID} to my app {applicationId} for {keyType}.
POST /applications/{applicationId}/api-keys/{keyType}/dissociate Remove an API key association from my application · Remove the association of the API Key to the Application #
Ask an LLM
“How do I unlink a key from my application without revoking it?”
“Can an app owner drop an associated API key from the application side?”
Tell an agent
Remove key {keyUUID} from application {applicationId} in {keyType}.
Unlink the associated {keyType} key {keyUUID} from app {applicationId}.
GET /applications/{applicationId}/api-keys/{keyType}/associations List API key associations for an application · Get API Key associations of a Given Type #
Ask an LLM
“Which API keys are currently linked to my application?”
“What key associations does an application have in sandbox?”
Tell an agent
List the {keyType} key associations of application {applicationId}.
Show which keys are associated with app {applicationId} for {keyType}.

Documentation

Specifications

Schemas & Data

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/wso2:wso2-api-keys-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

wso2-api-keys-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Wso2 API Keys API
  contact:
    name: WSO2
    url: https://wso2.com/api-manager/
    email: architecture@wso2.com
  license:
    name: Apache 2.0
    url: http://www.apache.org/licenses/LICENSE-2.0.html
  version: '1.0'
  description: 'Operations tagged APIKeys across 2 of this provider''s published API definitions: wso2-admin-api.yaml, wso2-devportal-api.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://apis.wso2.com/api/am/admin/v4
- url: https://apis.wso2.com/api/am/devportal/v3
tags:


# --- truncated at 32 KB (40 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wso2/refs/heads/main/openapi/wso2-api-keys-api-openapi.yml