kosli create api-key

Synopsis

kosli create api-key [flags]

Create an API key for a service account, or a personal API key for yourself. The key value is only returned once, at creation time, so make sure to store it securely. Every API key expires. Without --expires-at the key is given the maximum allowed lifetime, and an --expires-at beyond that maximum is capped to it. With --personal, a key created using another API key is revoked along with that key, and expires no later than it.

Flags

Flag	Type	Description
`-d`, `--description`	string	A description for the API key.
`-D`, `--dry-run`	bool	[optional] Run in dry-run mode. When enabled, no data is sent to Kosli and the CLI exits with 0 exit code regardless of any errors.
`-e`, `--expires-at`	string	[optional] When the API key expires. Accepts an epoch timestamp or a date like ‘2026-06-04’, ‘2026-06-04 15:04:05’, or an RFC3339 timestamp. Keys always expire: when not set, the key gets the maximum allowed lifetime, which also caps later dates.
`-h`, `--help`	bool	help for api-key
`-o`, `--output`	string	[defaulted] The format of the output. Valid formats are: [table, json]. (default “table”)
`--personal`	bool	Manage your own personal API keys instead of a service account’s. `--org` is not needed. Either this or `--service-account` is required.
`-s`, `--service-account`	string	The name of the service account whose API keys are managed. Either this or `--personal` is required.

Flags inherited from parent commands

Flag	Type	Description
`-a`, `--api-token`	string	The Kosli API token.
`-c`, `--config-file`	string	[optional] The Kosli config file path. Config is read from this path or the default only, never implicitly from the current directory. (default “$HOME/.kosli.yml”)
`--debug`	bool	[optional] Print debug logs to stdout.
`-H`, `--host`	string	[defaulted] The Kosli endpoint. (default “https://app.kosli.com”)
`--http-proxy`	string	[optional] The HTTP proxy URL including protocol and port number. e.g. `http://proxy-server-ip:proxy-port`
`-r`, `--max-api-retries`	int	[defaulted] How many times should API calls be retried when the API host is not reachable. (default 3)
`--org`	string	The Kosli organization.
`-q`, `--quiet`	bool	[optional] Suppress non-critical warning messages. Errors and normal output are not affected. If both `--quiet` and `--debug` are set, `--debug` wins.

Examples Use Cases

These examples all assume that the flags --api-token, --org, --host, (and --flow, --trail when required), are set/provided.

create an API key for a service account

kosli create api-key 
	--service-account yourServiceAccountName 
	--description "key for CI" 

create an API key that expires on a given date

kosli create api-key 
	--service-account yourServiceAccountName 
	--description "key for CI" 
	--expires-at 2026-12-31 

create a personal API key for yourself

kosli create api-key 
	--personal 
	--description "key for CI" 

Last modified on October 29, 2026

General

Top-level commands

kosli allow

kosli archive

kosli assert

kosli attest

kosli begin

kosli create

kosli delete

kosli diff

kosli disable / enable

kosli evaluate

kosli get

kosli join

kosli list

kosli log

kosli rename

kosli report

kosli rotate

kosli snapshot

kosli unarchive

kosli update

Synopsis

Flags

Flags inherited from parent commands

Examples Use Cases

​Synopsis

​Flags

​Flags inherited from parent commands

​Examples Use Cases

Synopsis

Flags

Flags inherited from parent commands

Examples Use Cases