Skip to main content
POST
/
v1
/
{workspace}
/
ws_public_key
Create Workspace Public Key
curl -X POST "https://management-api.suprsend.com/v1/{workspace}/ws_public_key/" \
  --header 'Authorization: ServiceToken <SERVICE_TOKEN>' \
  --header 'Content-Type: application/json' \
  --data '{"name":"web-app","description":"Browser integration"}'
{
  "id": "ws_pubk_exampleId01",
  "api_key": "SS.PUBK.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "name": "web-app",
  "allowed_domains": null,
  "is_secure_mode_enabled": false,
  "is_deleted": false,
  "is_default": false,
  "created_at": "2026-04-21T12:31:18.943398Z",
  "created_by": {
    "name": "System User",
    "email": "org_XXXXXXXXXXXXXXXXXXXXXX@systemuser.suprsend.com"
  },
  "rotated_at": null,
  "rotated_by": null,
  "updated_at": "2026-04-21T12:31:18.943443Z",
  "updated_by": null
}

Documentation Index

Fetch the complete documentation index at: https://docs.suprsend.com/llms.txt

Use this file to discover all available pages before exploring further.

Authorizations

​
ServiceToken <token>
string
header
required

You can get Service Token from SuprSend dashboard -> Account Settings -> Service Tokens section.

Path Parameters

​
workspace
string
required

Workspace slug (e.g. staging, production).

Body

application/json
​
name
string
required

Label for the public key.

Example:

"web-app"

​
description
string | null

Optional notes.

Response

Public key created.

Workspace public key used by client SDKs.

​
id
string
Example:

"ws_pubk_exampleId01"

​
api_key
string

Public key value exposed to clients.

Example:

"SS.PUBK.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

​
name
string
Example:

"web-app"

​
allowed_domains
string[] | null
​
is_secure_mode_enabled
boolean
​
is_deleted
boolean
​
is_default
boolean
​
created_at
string<date-time>
​
created_by
object

Identity that performed an action (created, updated, rolled, deleted, rotated).

​
rotated_at
string<date-time> | null
​
rotated_by
object

Identity that performed an action (created, updated, rolled, deleted, rotated).

​
updated_at
string<date-time>
​
updated_by
object

Identity that performed an action (created, updated, rolled, deleted, rotated).