Management API (0.27.5)
Vilna Management API. Manage workspaces, projects, team members, and API keys.
Authentication
Every request must include a management key (vilna_mgt_...) in the X-Api-Key header. Management keys are workspace-scoped: each key only sees the workspace it was created in. Every operation lists the permission scopes its key must hold (e.g., mgt:project:write). A key missing the required scope gets 403 Forbidden.
Key Types
Vilna has three key types, each with its own prefix. Don't mix them:
vilna_mgt_...: management keys authenticate calls to this API (manage workspaces, projects, members, and other keys).vilna_api_...: project-scoped API keys for the public Vilna API (api.vilna.io).vilna_rpc_...: workspace-scoped keys for blockchain JSON-RPC endpoints (rpc.vilna.io).
This API creates and revokes API keys and RPC keys. Management keys are issued via the Vilna dashboard and can't be listed or rotated here. Their lifecycle events (mgt_key.created, mgt_key.revoked) still appear in the activity log so admins can audit changes.
Quick Links
- Authorization Guide - Roles, permissions, and access control
- Quick Start Guide - Step-by-step integration tutorial
Endpoints
Workspace Management
- Members - Workspace members and their roles
- Invitations - Workspace invitation lifecycle
- Projects - Create, update, and delete projects within a workspace
- Project Members - Assign and manage project-level member access
- Activity Log - Audit trail of workspace activity
Key Management
RPC Access
- RPC - Workspace RPC endpoint details
Infrastructure
- Version - Service version info
Array Query Parameters
Filters that accept multiple values (status, role, type, etc.) use repeated keys:
- ✅
?status=active&status=revoked - ❌
?status=active,revoked
This follows the OpenAPI default (style: form, explode: true).
Need Help?
Visit our documentation portal for detailed guides and examples.