Create a project

POST

/v2/projects

The secret key is in this response only; the API stores its hash.

Authorization

AuthorizationBearer <token>

An API token from POST /v2/tokens (at_live_...), or a project's secret key (sk_...) for server-side ingest.

In: header

Request Body

TypeScript Definitions

Use the request body type in TypeScript.

id*string

The project id used in every /v2/projects/{project} path: lowercase letters, digits, dots and dashes. It cannot be changed.

Match^[a-z0-9][a-z0-9.-]*$

Length1 <= length <= 64

name*string

Display name.

Length1 <= length <= 128

domain*string

The site's host, such as remcostoeten.nl. The Chrome UX Report job looks it up.

Length1 <= length <= 253

visibility?string

public projects can be read without signing in; private ones need access.

Value in

"public"
"private"

publicVisitorData?boolean

On a public project, also lets anyone read visitor-level data: events, visitors and sessions. Off by default.

allowedOrigins?array<>

Origins that may send events with the public key, matched exactly, such as https://remcostoeten.nl. An empty list allows every origin.

retentionDays?integer

Days events and sessions are kept before the cleanup job deletes them; 90 by default.

Range1 <= value <= 3650

Response Body

`application/json`

curl -X POST "https://example.com/v2/projects" \  -H "Content-Type: application/json" \  -d '{    "id": "docs",    "name": "Docs",    "domain": "docs.remcostoeten.nl",    "visibility": "public",    "allowedOrigins": [      "https://docs.remcostoeten.nl"    ]  }'

{  "data": {    "id": "docs",    "name": "Docs",    "domain": "docs.remcostoeten.nl",    "visibility": "public",    "publicVisitorData": false,    "sqlEnabled": true,    "widgetReports": false,    "allowedOrigins": [      "https://docs.remcostoeten.nl"    ],    "retentionDays": 90,    "publicKey": "pk_live_c07b19e2",    "secretKey": "sk_live_5d0e7c1f9a2b4c6d8e0f",    "createdAt": "2026-09-27T16:41:00.000Z",    "updatedAt": "2026-09-27T16:41:00.000Z"  }}

AuthorizationCopy Anchor Link

Request BodyCopy Anchor Link

Response BodyCopy Anchor Link

201application/json

400application/json

401application/json

403application/json

404application/json

409application/json

500application/json

503application/json

Authorization

Request Body

Response Body

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`