User Management

Operations for user authentication and account management

Generate a new API key

post

Generates a new API key for the authenticated user (replaces existing key)

Authorizations

bearerAuth

AuthorizationstringRequired

JWT token for user session authentication.

Responses

200

API key generated successfully

application/json

apiKeystringOptional

The generated API key (only returned once)

Example: dw_1234567890abcdef

messagestringOptionalExample: API key generated successfully

401

Unauthorized

application/json

500

Internal Server Error

application/json

post

/generateApiKey

HTTPcURLJavaScriptPython

POST /api/generateApiKey HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "apiKey": "dw_1234567890abcdef",
  "message": "API key generated successfully"
}

Get API key status

get

Checks if the user has an API key and returns its creation date

Authorizations

bearerAuth

AuthorizationstringRequired

JWT token for user session authentication.

Responses

200

API key status retrieved successfully

application/json

hasApiKeybooleanOptional

Whether the user has an API key

createdAtstring · date-time · nullableOptional

When the API key was created (if it exists)

401

Unauthorized

application/json

500

Internal Server Error

application/json

get

/apiKeyStatus

HTTPcURLJavaScriptPython

GET /api/apiKeyStatus HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "hasApiKey": true,
  "createdAt": "2026-03-20T11:13:56.613Z"
}

Submit and validate user API key

post

Validates and stores a user's external API key (e.g., OpenRouter)

Authorizations

bearerAuth

AuthorizationstringRequired

JWT token for user session authentication.

Body

application/json

apiKeystringRequired

The API key to validate and store

Responses

200

API key validated and stored successfully

application/json

messagestringOptionalExample: API key validated and stored successfully

400

Invalid API key

application/json

401

Unauthorized

application/json

500

Internal Server Error

application/json

post

/submitApiKey

HTTPcURLJavaScriptPython

POST /api/submitApiKey HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 17

{
  "apiKey": "text"
}

{
  "message": "API key validated and stored successfully"
}