> ## Documentation Index > Fetch the complete documentation index at: https://docs.moderationapi.com/llms.txt > Use this file to discover all available pages before exploring further. # Create a project API key > Create a new secret API key for a project and return it. Give each app or computer its own key, so you can revoke one without breaking the others. The project's existing keys keep working. Needs the `projects:write` permission. ## OpenAPI ````yaml post /projects/{id}/api-keys openapi: 3.1.0 info: title: Moderation API description: >- Moderate text, images, video and audio in real time, manage authors, review queues and actions, and receive webhooks. version: 1.1.0 servers: - url: https://api.moderationapi.com/v1 security: [] tags: - name: Content description: Submit content for moderation. - name: Authors description: The users who create content, with their trust level and history. - name: Review queues description: Queues of content for human review, and their items. - name: Actions description: Moderation actions reviewers and rules can take. - name: Wordlists description: Custom word and phrase lists used by policies. - name: Webhooks description: Endpoints that receive events, and the events they receive. - name: Account description: The account that owns the API key. - name: Projects description: Projects in the organization. Needs an organization key. - name: Channels description: Channels in a project. Needs an organization key. - name: Voice description: Real-time voice moderation over WebSocket. externalDocs: url: https://docs.moderationapi.com paths: /projects/{id}/api-keys: post: tags: - Projects summary: Create a project API key description: >- Create a new secret API key for a project and return it. Give each app or computer its own key, so you can revoke one without breaking the others. The project's existing keys keep working. Needs the `projects:write` permission. operationId: createProjectApiKey parameters: - in: path name: id schema: type: string description: The ID of the project. required: true description: The ID of the project. requestBody: required: true content: application/json: schema: type: object properties: name: default: API key description: >- A name for the key, shown on the API keys page of the dashboard. Name it after where the key is used, for example the app or the computer. type: string minLength: 1 maxLength: 50 responses: '200': description: API key created successfully content: application/json: schema: $ref: '#/components/schemas/ProjectApiKey' '400': description: Invalid input data content: application/json: schema: $ref: '#/components/schemas/BadRequestError' '401': description: Authorization not provided content: application/json: schema: $ref: '#/components/schemas/AuthenticationError' '403': description: Insufficient access content: application/json: schema: $ref: '#/components/schemas/PermissionDeniedError' '404': description: Not found content: application/json: schema: $ref: '#/components/schemas/NotFoundError' '429': description: >- Too many requests. Retry after the number of seconds in the `Retry-After` header. headers: Retry-After: description: Seconds to wait before retrying. schema: type: integer content: application/json: schema: $ref: '#/components/schemas/RateLimitError' security: - Authorization: [] components: schemas: ProjectApiKey: type: object properties: id: type: string description: The ID of the API key. name: type: string description: The key's name. projectId: type: string description: The ID of the project the key belongs to. createdAt: description: When the key was created. type: string secretKey: type: string description: >- The new secret API key. Use it to moderate content in this project. It is also shown in the project's settings. required: - id - name - projectId - createdAt - secretKey additionalProperties: false BadRequestError: type: object description: The request is malformed or a parameter is invalid. properties: type: type: string const: invalid_request_error description: Broad error category. Stable; safe to switch on. code: type: string enum: - invalid_request - project_id_required - project_name_ambiguous - validation_failed x-speakeasy-unknown-values: allow description: >- Exactly what went wrong. Stable; safe to branch on. New codes may be added. - `invalid_request`: A parameter is invalid. `message` says which one. - `project_id_required`: An organization key called a project endpoint without naming the project in `Project-Id`, and the key reaches more than one project. `message` lists the projects it reaches. - `project_name_ambiguous`: The name in `Project-Id` fits more than one project the key reaches. `message` lists them; name the project by ID instead. - `validation_failed`: The request body does not match the schema. `issues` lists each problem with its `path`. example: invalid_request message: type: string description: Human-readable explanation. example: Invalid input data issues: type: array items: $ref: '#/components/schemas/ErrorIssue' description: Validation problems, when the request body is invalid. request_id: type: string description: Identifies this request. Include it when you contact support. example: h8fkz6kkzoa446ffve37atys doc_url: type: string format: uri description: Documentation for this `code`. required: - type - code - message - request_id - doc_url AuthenticationError: type: object description: The API key is missing, invalid or revoked. properties: type: type: string const: authentication_error description: Broad error category. Stable; safe to switch on. code: type: string enum: - unauthorized - missing_api_key - malformed_api_key - invalid_api_key x-speakeasy-unknown-values: allow description: >- Exactly what went wrong. Stable; safe to branch on. New codes may be added. - `unauthorized`: Authentication failed. - `missing_api_key`: No API key in the `Authorization` header. - `malformed_api_key`: The `Authorization` header does not contain a valid key format. - `invalid_api_key`: The API key does not exist or was revoked. example: unauthorized message: type: string description: Human-readable explanation. example: Authorization not provided issues: type: array items: $ref: '#/components/schemas/ErrorIssue' description: Validation problems, when the request body is invalid. request_id: type: string description: Identifies this request. Include it when you contact support. example: h8fkz6kkzoa446ffve37atys doc_url: type: string format: uri description: Documentation for this `code`. required: - type - code - message - request_id - doc_url PermissionDeniedError: type: object description: >- The API key cannot do this, or the plan limit for this resource is reached. properties: type: type: string const: permission_error description: Broad error category. Stable; safe to switch on. code: type: string enum: - permission_denied - account_disabled - quota_exceeded - plan_feature_unavailable - plan_limit_exceeded - organization_key_required - missing_key_permission - project_not_reachable x-speakeasy-unknown-values: allow description: >- Exactly what went wrong. Stable; safe to branch on. New codes may be added. - `permission_denied`: The API key cannot perform this request. - `account_disabled`: The organization account is disabled. - `quota_exceeded`: The organization has used all API requests on its plan. - `plan_feature_unavailable`: The current plan does not include this feature. - `plan_limit_exceeded`: The request goes over a limit of the current plan. - `organization_key_required`: This endpoint needs an organization API key, but a project key was used. - `missing_key_permission`: The organization key does not have the permission this endpoint needs. - `project_not_reachable`: The organization key is limited to other projects. example: permission_denied message: type: string description: Human-readable explanation. example: Insufficient access issues: type: array items: $ref: '#/components/schemas/ErrorIssue' description: Validation problems, when the request body is invalid. request_id: type: string description: Identifies this request. Include it when you contact support. example: h8fkz6kkzoa446ffve37atys doc_url: type: string format: uri description: Documentation for this `code`. required: - type - code - message - request_id - doc_url NotFoundError: type: object description: The resource does not exist or the key cannot see it. properties: type: type: string const: not_found_error description: Broad error category. Stable; safe to switch on. code: type: string enum: - resource_not_found - action_not_found - author_not_found - queue_not_found - wordlist_not_found - webhook_not_found - project_not_found - channel_not_found x-speakeasy-unknown-values: allow description: >- Exactly what went wrong. Stable; safe to branch on. New codes may be added. - `resource_not_found`: The resource does not exist. - `action_not_found`: The action does not exist. - `author_not_found`: The author does not exist. - `queue_not_found`: The review queue does not exist. - `wordlist_not_found`: The wordlist does not exist. - `webhook_not_found`: The webhook does not exist. - `project_not_found`: The project does not exist. - `channel_not_found`: The channel does not exist. example: resource_not_found message: type: string description: Human-readable explanation. example: Not found issues: type: array items: $ref: '#/components/schemas/ErrorIssue' description: Validation problems, when the request body is invalid. request_id: type: string description: Identifies this request. Include it when you contact support. example: h8fkz6kkzoa446ffve37atys doc_url: type: string format: uri description: Documentation for this `code`. required: - type - code - message - request_id - doc_url RateLimitError: type: object description: >- Too many requests. Retry after the number of seconds in the `Retry-After` header. properties: type: type: string const: rate_limit_error description: Broad error category. Stable; safe to switch on. code: type: string enum: - rate_limit_exceeded x-speakeasy-unknown-values: allow description: >- Exactly what went wrong. Stable; safe to branch on. New codes may be added. - `rate_limit_exceeded`: Too many requests. Wait for the `Retry-After` seconds. example: rate_limit_exceeded message: type: string description: Human-readable explanation. example: Rate limit exceeded issues: type: array items: $ref: '#/components/schemas/ErrorIssue' description: Validation problems, when the request body is invalid. request_id: type: string description: Identifies this request. Include it when you contact support. example: h8fkz6kkzoa446ffve37atys doc_url: type: string format: uri description: Documentation for this `code`. required: - type - code - message - request_id - doc_url ErrorIssue: type: object properties: message: type: string description: What is wrong. path: type: array items: anyOf: - type: string - type: number description: Location of the invalid field in the request body. code: type: string description: Validation rule that failed. required: - message securitySchemes: Authorization: type: http scheme: bearer x-speakeasy-name-override: secretKey ````