Authentication

• OpenAPI 3.1.0 document: https://api.rollstack.com/public/v1/openapi.json
• The whole reference in Markdown: https://docs.rollstack.com/llms-full.txt
• An index of the reference: https://docs.rollstack.com/llms.txt

An API key acts as the user who created it, in the one organization it was created in, and sees only what that user sees in the app. It never acts with more than the role its user had when they created it, and a key whose user is now a member loses the scopes only owners and admins may grant.

Keys expire on the date set when they were created, if any. A user can revoke their keys in the app at any time, and deactivating a user revokes all of theirs. A missing, unknown, revoked or expired key answers 401.