Organizations

Manage child organizations end-to-end — lifecycle, child keys, wallets, and the whoami resolver.

Run each customer as an isolated child organization: create and govern them, mint per-child keys, fund and cap their wallets, and resolve the calling key back to its org. The control-plane calls require the org:admin scope.

Lifecycle

Create an organization

Provision an isolated child org under your parent - one per customer.

List organizations

Cursor-paginated list of your child orgs.

Get an organization

One child org plus its credit + project summary.

Update an organization

Edit name, metadata (Stripe-merge), and billing email.

Suspend

Reversible kill switch — pause a child without deleting it.

Resume

Lift a suspension and return the child to active.

Migrate projects

Move existing projects into newly-created child orgs.

Credits

Child wallet

A child org's balance and spendable available.

Child credit events

The child's ledger, including parent→child allocations.

Allocate credits

Fund a child from your parent wallet - idempotent.

Credit config

Set the child's monthly cap and parent-funded auto-refill.

Keys & identity

Whoami

Resolve the calling key to its org, scopes, parent org, and credit balance.

Mint a child key

Issue an API key for one of your child organizations - secret shown once.

List child keys

Masked view of every key on a child org.

Rotate a child key

Zero-downtime secret rollover with a 24h grace window.

Delete a child key

Immediate revoke, no grace.