Mint a scoped read-only download key for managed storage

POST 
/program/api/v2/storage-profiles/:surface/download-key

Mints a Backblaze application key scoped to the tenant's managed bucket for this surface with read-only capabilities (listBuckets/listFiles/readFiles) — for programmatic tenant access (e.g. aws s3 ls/cp) without the dashboard (M6 Task 014).

The applicationKey is returned once (B2/AWS semantics — not retrievable later). The per-tenant member MASTER key is never returned. Managed surfaces only: BYO surfaces respond 422 (the tenant already holds their own credentials).

Generate JWT

Request

Responses

• 201
• 422
• 500

A freshly-minted scoped read-only key (shown once)

Surface is BYO or has no managed bucket

Internal Server Error