# API Keys

Create API keys to authenticate against the Grinfi API. Each key is a JWT token bound to your current team with a 3-year expiry. Pass the key in the `Authorization: Bearer <key>` header on every request.


## Create an API key

 - [POST /id/api/jwt-tokens/create-api-key](https://api.grinfi.io/openapi/api-keys/createapikey.md): Create a new API key bound to your current team. The returned last_token is the actual JWT to use in the Authorization: Bearer  header on subsequent requests. Tokens have a 3-year expiry.

Important: save the token immediately — it is only returned in this response and cannot be retrieved later.