# CreateApiKeyForMerchantUserDto

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

Request to mint (and reveal once) an API key owned by a specific merchant user, provisioned by a
reseller or admin. The server resolves and scope-checks the target user against
`merchantId`; the caller is authorized over that merchant server-side. The revealed key
is returned once in the response and never persisted in clear or logged.

## Fields
- `userId` (string(uuid)) required: The identity user the key is minted for (the owner). Must be an active merchant user of              `merchantId` in the current tenant.
- `merchantId` (string(uuid)) required: The merchant the target user belongs to, used for the server-side scope check.
- `name` (string) required: Human-readable key name. (nullable, max length 32)
- `expireAt` (string(date-time)) required: Required expiry. A durable credential provisioned for another user must not be immortal,              so a null value is rejected. (nullable)

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.