igrantio-api-api-keyslisted
Install: claude install-skill L3-iGrant/skills
# iGrant.io OID4VC API - API Keys
## When to use
Use this skill when the task is one of these:
- Make an API key so that a server can call the OID4VCI and OpenID4VP
endpoints without a user session.
- Change the name, the scopes, or the lifetime of a key.
- Delete a key, or list the keys of the organisation.
- Point a key at a sandbox organisation, or back at the main wallet.
An API key replaces a bearer access token on the OID4VC endpoints. Send it as
`Authorization: ApiKey <apiKey>`. The key lives only on the server side, in an
environment variable or a secret manager. The browser never sees it.
## Endpoint reference
Base URL for the demo environment: `https://demo-api.igrant.io`.
| Method | Path | Purpose | Documentation |
| --- | --- | --- | --- |
| `POST` | `/v2/config/admin/apikey` | Create an API key. Gives **HTTP 200**, not 201. | [Create API key](https://docs.igrant.io/docs/openid4vc-api/config-create-digital-wallet-open-id-api-key/) |
| `PUT` | `/v2/config/admin/apikey/{apiKeyId}` | Update the name, the scopes, and the lifetime. Signs a new token. | [Update API key](https://docs.igrant.io/docs/openid4vc-api/config-update-digital-wallet-open-id-api-key/) |
| `DELETE` | `/v2/config/admin/apikey/{apiKeyId}` | Delete a key. Gives the key as it was at the moment of the delete. | [Delete API key](https://docs.igrant.io/docs/openid4vc-api/config-delete-digital-wallet-open-id-api-key/) |
| `PUT` | `/v2/config/admin/apikey/{apiKeyId}/sandbox-org` | Bind the key to a