Mint a scoped read-only download key for managed storage

POST 
/program/api/v2/storage-profiles/:surface/download-key

warning

This endpoint is available in private cloud only. Use your global host URL if self-hosted.

Mints a Backblaze application key scoped to the tenant's managed bucket for this surface with read-only capabilities (listBuckets/listFiles/readFiles) — for programmatic tenant access (e.g. aws s3 ls/cp) without the dashboard (M6 Task 014).

The applicationKey is returned once (B2/AWS semantics — not retrievable later). The per-tenant member MASTER key is never returned. Managed surfaces only: BYO surfaces respond 422 (the tenant already holds their own credentials).

Generate JWT

Request

Responses

201

A freshly-minted scoped read-only key (shown once)

422

Surface is BYO or has no managed bucket

500

Internal Server Error