Mint a dfm_ API key
create_api_keyMint a dfm_ API key for the agent owner via SIWS login to grant scoped, read-only API access; the key is saved locally and never exposed in chat.
Instructions
Mint a dfm_ API key for this agent's owner (SIWS session only). READ-ONLY: write keys and write caps are refused unless the operator set DFM_ALLOW_WRITE_KEY_MINT=1. Expires in 30 days by default (max 90). The key is written to ~/.config/dfm/api-keys/-.key (0600) and NEVER returned to the chat; only its prefix and path are. Optional last step of: create_identity_wallet → SIWS login (automatic) → set_profile {displayName} (avatar: operator image or a generated default) → create_app_wallet → app_wallet_fund {usdc, sol} → create_api_key (optional).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| readOnly | No | default true | |
| expiresAt | No | ISO-8601, in the future | |
| allowedOps | No | ||
| allowedPrograms | No | ||
| dailyNotionalUsdc | No | ||
| perOpNotionalUsdc | No | ||
| destinationWhitelist | No | ||
| allowArbitraryPrograms | No |