---
title: "Create client key"
method: POST
path: "/v2/settings/security/keys"
tags: ["Security Keys"]
---

# Create client key

`POST /v2/settings/security/keys`

Creates a client key from a JSON request body. Supported variants include OAuth integrations, inline PGP or SSH key material, JWT signing keys, webhook secrets, and generic password or HTTP basic credentials. Set `algorithm` to select the polymorphic request and response schema. Set `type` to classify what the key is used for.

## Request body

- union — Body of a `POST /v2/settings/security/keys` request.
  - object
    - `algorithm` 'A128KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'A192KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'A256KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'ES512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'HS256', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'HS384', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'HS512', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'HTTP_BASIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'OAUTH', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_GENERIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `request` union — Choose between static or dynamic request
      - object — Static request
        - `body` string, nullable
        - `headers` object
        - `url` string
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Handlebars expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts).
      - string — Javascript expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts).
    - `response_handler` union — Choose between static or dynamic response handler
      - object — Static response handler
        - `accessToken` string
        - `expiresIn` integer
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Handlebars expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts).
      - string — Javascript expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts).
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_LEAD_PERFECTION', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `app_key` string
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `lead_perfection_client_id` string
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_LISTRAK', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_OPTIMOVE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_SALESFORCE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `account_id` integer, required
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_SFDC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
  - object
    - `algorithm` 'OAUTH_SFDC_PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `authorization_url` union, required — Build-time expression that resolves to the OAuth 2.0 authorization endpoint URL.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `password` string, required
    - `scope` string, nullable, required — Optional space-delimited OAuth scopes to request during authorization.
    - `username` string, required
  - object
    - `algorithm` 'PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'PS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
  - object
    - `algorithm` 'RSA_OAEP_512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[]
    - `component_references` ComponentReferenceRequest[]
      - `component_id` string
      - `socket_names` string[]
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Static description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `key` string, required — Key material as a string (encoded as ISO-8859-1 bytes). Required format depends on `algorithm`: symmetric (`HS256`, `HS384`, `HS512`, `A128KW`, `A192KW`, `A256KW`) — shared secret string; RSA/PS `*_PUBLIC` — PEM `BEGIN PUBLIC KEY` or DER-encoded X.509 SPKI; RSA/PS `*_PRIVATE` — PEM `BEGIN PRIVATE KEY` or PKCS#8 DER; EC `*_PRIVATE` — PEM EC private key; `PASSWORD` — plain password; `HTTP_BASIC` — `username:password`; `OAUTH*` — OAuth client secret string.
    - `name` union, required — Build-time expression that resolves to the display name for the key.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, nullable, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[] — Free-form tags used to filter active keys on list.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.

## Response `200`

Successful response

- union
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'A128KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'A192KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'A256KW', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'ES512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'HS256', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'HS384', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'HS512', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'HTTP_BASIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored oauth client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth generic client key definition. Fields `name`, `description`, `authorization_url`, `request`, and `response_handler` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_GENERIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `request` union, required — The request as configured: a literal value, or an expression (type:string) when defined dynamically.
      - object — Literal request
        - `body` string, nullable
        - `headers` object
        - `url` string
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Handlebars expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts).
      - string — Javascript expression with [OAuthClientKeyRuntimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/OAuthClientKeyRuntimeContext.d.ts).
    - `response_handler` union, required — The response handler as configured: a literal value, or an expression (type:string) when defined dynamically.
      - object — Literal response handler
        - `accessToken` string
        - `expiresIn` integer
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Handlebars expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts).
      - string — Javascript expression with [OAuthClientKeyResponseContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/response/OAuthClientKeyResponseContext.d.ts).
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth lead perfection client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_LEAD_PERFECTION', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `appKey` string, required
    - `app_key` string
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `leadPerfectionClientId` string, required
    - `lead_perfection_client_id` string
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth listrak client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_LISTRAK', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth optimove client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_OPTIMOVE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth salesforce client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_SALESFORCE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `account_id` integer, required
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth sfdc client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_SFDC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
  - object — Stored oauth sfdc password client key definition. Fields `name`, `description`, and `authorization_url` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'OAUTH_SFDC_PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `authorization_url` union, required — OAuth 2.0 authorization endpoint URL, in build-time evaluatable form.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `oauth_client_id` string, required — OAuth 2.0 client identifier registered with the authorization server.
    - `password` string, required
    - `scope` string, nullable, required — Space-delimited OAuth scopes requested during authorization.
    - `username` string, required
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PASSWORD', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'PS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RS512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_256_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_256_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_384_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_384_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_512_PRIVATE', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored generic client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'RSA_OAEP_512_PUBLIC', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - object — Stored ssl pkcs12client key definition. Fields `name` and `description` are unevaluated and appear in buildtime-evaluatable form.
    - `algorithm` 'SSL_PKCS_12', required — Cryptographic or integration algorithm. Discriminator for polymorphic create, update, and response schemas.
    - `component_ids` string[], required
    - `component_references` ComponentReferenceResponse[], required
      - `component_id` string
      - `socket_names` string[]
    - `created_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `description` union, required — Optional build-time expression that resolves to a human-readable description.
      - string, nullable — Literal description
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `id` string, required — Stable Extole identifier for the client key.
    - `key` string, required — Key material in the same encoding accepted on create. Symmetric secrets and private keys are partially masked in API responses; public keys are returned in full PEM form.
    - `name` union, required — Display name for the key, in the same build-time evaluatable form that was supplied on create or update.
      - string — Handlebars expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
      - string — Javascript expression with [ClientKeyBuildtimeContext](https://github.com/extole/extole-specification/blob/main/openapi/expression-context/com/extole/api/client/security/key/built/ClientKeyBuildtimeContext.d.ts).
    - `partner_key_id` string, required — External key identifier used to match tokens or credentials to this key (for example the JWT kid header).
    - `tags` string[], required — Free-form tags applied to the client key.
    - `type` 'JWT' | 'PASSWORD' | 'PGP' | 'PGP_EXTOLE' | 'SSH' | 'WEBHOOK', required — Usage category that determines how the key is consumed at runtime.
    - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
    - `password` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `402` — Payment Required
- `403` — Forbidden
- `415` — Unsupported Media Type
- `429` — Too Many Requests

---

[API](https://skmtc.net/extole/apis/integration-api-server-to-extole.md) · [All operations](https://skmtc.net/extole/apis/integration-api-server-to-extole/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extole/integration-api-server-to-extole/revisions/c16e62e66755/schema)