> ## Documentation Index
> Fetch the complete documentation index at: https://plainrouter.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a sandbox API key

> Issues a short-lived sandbox-only bearer key without an account, human approval, or production access.



## OpenAPI

````yaml https://plainrouter.com/openapi.json post /sandbox/keys
openapi: 3.1.0
info:
  title: PlainRouter Conversion API
  version: 0.5.0
  description: PlainRouter public Signals Conversion API.
servers:
  - url: https://plainrouter.com/api/v1
    description: Production
security:
  - signalTrackerSecret: []
paths:
  /sandbox/keys:
    post:
      tags:
        - Sandbox
      summary: Create a sandbox API key
      description: >-
        Issues a short-lived sandbox-only bearer key without an account, human
        approval, or production access.
      operationId: createSandboxKey
      responses:
        '201':
          description: Short-lived sandbox API key issued.
          content:
            application/json:
              schema:
                type: object
                properties:
                  api_key:
                    type: string
                  token_type:
                    type: string
                  expires_in:
                    type: integer
                  expires_at:
                    type: string
                  scope:
                    type: string
                  production_access:
                    type: boolean
                  use:
                    type: object
                    properties:
                      method:
                        type: string
                      url:
                        type: string
                      authorization:
                        type: string
                    required:
                      - method
                      - url
                      - authorization
                required:
                  - api_key
                  - token_type
                  - expires_in
                  - expires_at
                  - scope
                  - production_access
                  - use
          headers:
            Access-Control-Allow-Origin:
              schema:
                type: string
                const: '*'
            Cache-Control:
              schema:
                type: string
                const: no-store, private
            X-Content-Type-Options:
              schema:
                type: string
                const: nosniff
      security: []
components:
  securitySchemes:
    signalTrackerSecret:
      type: http
      description: >-
        Per-tracker bearer secret. It authenticates only the Signal tracker
        represented by the credential.
      scheme: bearer

````