Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.userepo.com/llms.txt

Use this file to discover all available pages before exploring further.

Requires the admin action. See Authentication for scoping.

​
List keys

GET https://api.userepo.com/v1/api-keys
Returns all non-revoked keys for the organization. 
{
  "apiKeys": [
    {
      "id": "uuid",
      "name": "support-agent-prod",
      "prefix": "repo_a1b2",
      "actorType": "agent",
      "allowedActions": ["search", "context", "ask"],
      "allowedProviders": ["slack", "notion"],
      "lastUsedAt": "2026-05-30T19:42:00Z",
      "createdAt": "2026-05-23T18:33:00Z"
    }
  ]
}
Note: the response includes prefix (the first 8 chars of the key) but never the full secret. The full secret is only available at creation time.

​
Create a key

POST https://api.userepo.com/v1/api-keys
​
name
string
required
Human-facing label. Min 1, max 80 chars.
​
actorType
string
default:"agent"
One of agent, application, admin.
​
allowedActions
string[]
required
Array of actions (see Authentication → Actions). Min 1 entry.
​
allowedProviders
string[]
default:"null"
Whitelist of provider IDs. null = no restriction.

​
Response

{
  "apiKey": {
    "id": "uuid",
    "name": "support-agent-prod",
    "secret": "repo_live_a1b2c3d4e5f6...",
    "prefix": "repo_a1b2",
    "actorType": "agent",
    "allowedActions": ["search", "context", "ask"],
    "allowedProviders": ["slack", "notion"],
    "createdAt": "2026-05-30T20:14:00Z"
  }
}
The secret field is returned only on creation. Repo stores a SHA-256 hash and cannot recover the secret. If you lose it, revoke the key and create a new one.

​
Tier limits

Each plan caps the number of active API keys:
TierMax keys
Builder2
Studio10
ScaleUnlimited
Hitting the cap returns 403 agent_limit_reached. Upgrade in the console to add more.

​
Revoke a key

DELETE https://api.userepo.com/v1/api-keys/{id}
Sets revoked_at on the row; future requests using the key get 401 Invalid API key immediately (no cache). Repo refuses to revoke the key currently authenticating the request — you can’t lock yourself out by accident. Use a different admin key to revoke this one. 
{ "revoked": true, "id": "uuid" }