Create and manage API keys via the meshStack API
Florian Nowarre
As a platform engineer, I want to create, list, and delete meshStack API keys programmatically via the meshStack REST API.
Currently, API keys can only be created through the meshStack UI (Admin Area > Access Control > API Keys). This makes it impossible to automate API key lifecycle management,
which is needed for:
- Automated provisioning of API keys as part of infrastructure-as-code workflows
- Programmatic key rotation for security compliance
- Self-service API key management integrated into CI/CD pipelines
The ephemeral API keys feature (for Building Block runs) covers a narrow use case but
does not allow creating persistent, named API keys with configurable permissions via the API.
Requested capabilities:
- POST endpoint to create a new API key with specified name and permissions
- GET endpoint to list existing API keys
- DELETE endpoint to revoke/delete an API key
- Ability to set permission scopes on creation