Use the Passkey-X API with a personal API key
Create a scoped, expiring key with an IP allowlist, try it in the console, then use it in Postman or your script.
Steps
Open your account menu (top right) › Developers & API › API keys and choose Create key.
Name it after the script that will use it, choose what it may do (for example Vault items: Read, Change feed: Read) and how long it lasts.
Add the IP addresses it will be used from (Add my address fills in this computer). A leaked key then doesn't work anywhere else.
Copy the key (pxu_…) into your secret manager: it's shown once. Then try GET /v1/me in Developers › Console, or download the Postman collection.
Watch each key's Activity, and revoke a key the moment you don't need it.
Good to know
- Make a test key for a quick try: it's read-only and expires after one hour.
- You get an email the first time a key is used from a new IP address. If that wasn't you, revoke the key.
- Vault contents stay end-to-end encrypted: the API only ever returns ciphertext.