Workspaces

A workspace is the unit of tenancy. One workspace per business entity.

POST /api/workspaces

Public · Used during signup; no apk_ needed.

Body:

{
"name": "Acme Inc",
"plan": "alpha"          // "alpha" (free) | "growth" ($199/mo)
}

Creates: workspace row + FBO banking sub-account + issuing partner merchant + initial apk_ key. The key secret is returned ONCE in the response.

GET /api/workspaces

Lists workspaces the authenticated user is a member of.

API keys

POST /api/auth/keys

Bearer apk_ · write:api_keys

{
"label": "production-agent-runner",
"scopes": ["read:treasury", "read:cards", "write:agents"]
}

Returns { apiKey, secret } — secret shown only once.

GET /api/auth/keys

Lists all keys (prefix only, never the full secret).

DELETE /api/auth/keys?id=<id>

Bearer apk_ · write:api_keys

Revokes a key. Cannot be undone.