--- title: "List client keys" method: GET path: "/v2/settings/security/keys" tags: ["Security Keys"] --- # List client keys `GET /v2/settings/security/keys` Returns active (non-archived) security keys for the client. Keys store credentials and cryptographic material used by integrations, campaign components, SFTP file transfer, and outbound webhooks. Pass one or more `tags` query values; a key is returned only when it includes every supplied tag. Use `GET /v2/settings/security/keys/built` for the fully evaluated runtime form. ## Query parameters - `tags` string[] ## Response `200` Successful response - ClientKeyResponse[] - union - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'A128KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'A192KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'A256KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'ES512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'HS256', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'HS384', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'HS512', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'HTTP_BASIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored oauth client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth generic client key definition. Fields `name`, `description`, `authorization_url`, `request`, and `response_handler` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_GENERIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `request` union, required — The request as configured: a literal value, or an expression (type:string) when defined dynamically. - object — Literal request - `body` string, nullable - `headers` object - `url` string - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Handlebars expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts). - string — Javascript expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts). - `response_handler` union, required — The response handler as configured: a literal value, or an expression (type:string) when defined dynamically. - object — Literal response handler - `accessToken` string - `expiresIn` integer - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Handlebars expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts). - string — Javascript expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts). - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth lead perfection client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_LEAD_PERFECTION', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `appKey` string, required - `app_key` string - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `leadPerfectionClientId` string, required - `lead_perfection_client_id` string - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth listrak client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_LISTRAK', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth optimove client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_OPTIMOVE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth salesforce client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_SALESFORCE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `account_id` integer, required - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth sfdc client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_SFDC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - object — Stored oauth sfdc password client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'OAUTH_SFDC_PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server. - `password` string, required - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization. - `username` string, required - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'PS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'RSA_OAEP_512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - object — Stored ssl pkcs12client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form. - `algorithm` 'SSL_PKCS_12', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas. - `component_ids` string[], required - `component_references` ComponentReferenceResponse[], required - `component_id` string - `socket_names` string[] - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `description` union, required — Optional build-time expression that resolves to a human-readable description. - string, nullable — Literal description - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `id` string, required — Stable Extole identifier for the client key. - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form. - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update. - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts). - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header). - `tags` string[], required — Free-form tags applied to the client key. - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime. - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds. - `password` string, required ## Other responses - `400` — Bad Request - `401` — Unauthorized - `402` — Payment Required - `403` — Forbidden - `415` — Unsupported Media Type - `429` — Too Many Requests --- [API](https://skmtc.net/extole/apis/integration-api-server-to-extole.md) · [All operations](https://skmtc.net/extole/apis/integration-api-server-to-extole/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extole/integration-api-server-to-extole/revisions/c16e62e66755/schema)