API keys
Authenticate with an API key to get an access token, and manage API keys.
List API keys
Returns the registered API keys, including revoked ones (check `isRevoked`).
Create an API key
Creates an API key and returns it once. Store it securely; it cannot be retrieved again.
Exchange an API key for an access token
Send the API key as the bearer token (`Authorization: Bearer <api-key>`) together with the `userId` of one of the key's linked users.
Revoke an API key
Revokes the key identified by `appId`.