curl -sS -X POST "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs/org_01HXV2K8Z3QJ5N6P7R8S9T0U1V/keys" \
  -H "Authorization: Bearer $PHOSRA_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Server (sandbox)",
  "environment": "test",
  "scopes": [
    "policies:write",
    "enforcement:write"
  ]
}'

const BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1";
const res = await fetch(`${BASE}/developers/orgs/org_01HXV2K8Z3QJ5N6P7R8S9T0U1V/keys`, {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.PHOSRA_SESSION_TOKEN}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "name": "Server (sandbox)",
    "environment": "test",
    "scopes": [
      "policies:write",
      "enforcement:write"
    ]
  }),
});
console.log(res.status, await res.json());

import os, requests

BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1"
res = requests.post(
    f"{BASE}/developers/orgs/org_01HXV2K8Z3QJ5N6P7R8S9T0U1V/keys",
    headers={"Authorization": f"Bearer {os.environ['PHOSRA_SESSION_TOKEN']}"},
    json={
        "name": "Server (sandbox)",
        "environment": "test",
        "scopes": [
            "policies:write",
            "enforcement:write"
        ]
    },
)
print(res.status_code, res.json())

package main

import (
	"bytes"
	"fmt"
	"io"
	"net/http"
	"os"
)

func main() {
	base := "https://phosra-api-sandbox-production.up.railway.app/api/v1"
	body := bytes.NewBufferString(`{
  "name": "Server (sandbox)",
  "environment": "test",
  "scopes": [
    "policies:write",
    "enforcement:write"
  ]
}`)
	req, _ := http.NewRequest("POST", base+"/developers/orgs/org_01HXV2K8Z3QJ5N6P7R8S9T0U1V/keys", body)
	req.Header.Set("Authorization", "Bearer "+os.Getenv("PHOSRA_SESSION_TOKEN"))
	req.Header.Set("Content-Type", "application/json")
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
	out, _ := io.ReadAll(resp.Body)
	fmt.Println(resp.Status, string(out))
}

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs/{orgId}/keys",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'scopes' => [
        'read:children',
        'read:policies'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs/{orgId}/keys")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"scopes\": [\n    \"read:children\",\n    \"read:policies\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs/{orgId}/keys")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"scopes\": [\n    \"read:children\",\n    \"read:policies\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "6df6a2a1-ed1b-42b6-8901-3c16aca1ff85",
  "org_id": "ef35953a-44f5-473a-a86f-1341163fa40e",
  "name": "docs-dx24-sample",
  "key_prefix": "phosra_test_d0a474be",
  "environment": "test",
  "scopes": [
    "read:children",
    "read:policies"
  ],
  "created_by": "06c5090f-ea5b-4841-a611-e8c9d67df0c5",
  "created_at": "2026-07-06T09:23:04.301651883Z",
  "key": "phosra_test_d0a474be988b6d558b350d3552e9d8fdd8e7ace606110155ada71849be7f71ff"
}

{
  "error": "Bad Request",
  "message": "invalid scope requested: bogus:scope",
  "code": 400
}

{
  "error": "Unauthorized",
  "message": "missing authorization header",
  "code": 401
}

{
  "error": "Forbidden",
  "message": "insufficient role for this action",
  "code": 403
}

{
  "error": "Not Found",
  "message": "developer org not found",
  "code": 404
}

{
  "error": "Conflict",
  "message": "organization slug already exists, please try again",
  "code": 409
}

{
  "error": "Too Many Requests",
  "message": "rate limit exceeded",
  "code": 429
}

{
  "error": "Internal Server Error",
  "message": "internal error",
  "code": 500
}