Request Api Key

Mint an API key for the given email, email a copy, and return it so the web form can show it immediately. Unauthenticated by design — this is how you GET a key — but rate-limited per email and per IP to curb abuse.