# gala_launchpad_create_api_key

Create a new API key for delegating permissions. CRITICAL: The rawKey in the response is ONLY shown once! Store it securely immediately - it cannot be retrieved again. Roles (hierarchical): - MODERATOR: Manage comments, chat, bans - TECHNICAL_PRODUCER: Stream control, simulcast - MANAGER: Moderator + Technical Producer + recordings - OWNER: Full access Token Delegation: - delegateAllTokens=true: Access to all current and future tokens - delegateAllTokens=false + tokenNames: Access to specific tokens only RETURNS: { id, keyPrefix, rawKey, description, role, delegateAllTokens, tokenNames, expiresAt, createdAt, ... } Authentication: Requires JWT auth (call sdk.login() first).

Agent View of the PolicyLayer registry record for `gala_launchpad_create_api_key`. HTML page: https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-create-api-key

## Facts

- Tool: `gala_launchpad_create_api_key`
- Server: Gala (`@gala-chain/gala-mcp-server`) — https://policylayer.com/tools/gala-chain-gala-mcp-server.md
- Install: `npx -y @gala-chain/gala-mcp-server`
- Homepage: https://www.npmjs.com/package/@gala-chain/gala-mcp-server
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 5 (1 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `role` | string | yes | API key role determining permissions: - MODERATOR: Manage comments, chat messages, ban/unban users - TECHNICAL_PRODUCER: Simulcast targets, stream key, stop/sta |
| `expiresAt` | string | no | Optional expiration date in ISO 8601 format (e.g., "2025-12-31T23:59:59Z"). If not provided, never expires. |
| `tokenNames` | array | no | Specific tokens to delegate access to (ignored if delegateAllTokens is true). Token names are case-insensitive. |
| `description` | string | no | User's description/label for this API key (max 255 characters) |
| `delegateAllTokens` | boolean | no | If true, key has access to ALL tokens owned by the user (current and future). If false, only tokens in tokenNames are accessible. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "gala_launchpad_create_api_key",
    "arguments": {
      "role": "<role>"
    }
  }
}
```

## Why gala_launchpad_create_api_key is rated Medium

An AI agent can call gala_launchpad_create_api_key faster than any human can review: one bad instruction and it creates or modifies resources in Gala by the hundred, each call as confident as the last.

## Use case

AI agents use gala_launchpad_create_api_key to create or update resources in Gala, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Gala environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Gala:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "gala_launchpad_create_api_key": {
      "limits": [
        {
          "counter": "gala_launchpad_create_api_key_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Gala (323)

- `gala_launchpad_action_flag` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-action-flag.md
- `gala_launchpad_burn_tokens` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-burn-tokens.md
- `gala_launchpad_clear_cache` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-clear-cache.md
- `gala_launchpad_delete_chat_message` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-delete-chat-message.md
- `gala_launchpad_delete_comment` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-delete-comment.md
- `gala_launchpad_delete_message` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-delete-message.md
- `gala_launchpad_delete_recording` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-delete-recording.md
- `gala_launchpad_estimate_remove_liquidity` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-estimate-remove-liquidity.md
- `gala_launchpad_fetch_bridgeable_tokens_by_network` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-fetch-bridgeable-tokens-by-network.md
- `gala_launchpad_fetch_wrappable_tokens` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-fetch-wrappable-tokens.md
- `gala_launchpad_logout` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-logout.md
- `gala_launchpad_remove_ban` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-ban.md
- `gala_launchpad_remove_content_reaction` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-content-reaction.md
- `gala_launchpad_remove_liquidity` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-liquidity.md
- `gala_launchpad_remove_reaction_from_chat_message` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-reaction-from-chat-message.md
- `gala_launchpad_remove_reaction_from_comment` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-reaction-from-comment.md
- `gala_launchpad_remove_simulcast_target` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-remove-simulcast-target.md
- `gala_launchpad_reset_stream_key` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-reset-stream-key.md
- `gala_launchpad_revoke_api_key` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-revoke-api-key.md
- `gala_launchpad_revoke_moderator_invite` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-revoke-moderator-invite.md
- `gala_launchpad_revoke_overseer` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-revoke-overseer.md
- `gala_launchpad_revoke_overseer_invite` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-revoke-overseer-invite.md
- `gala_launchpad_unban_token` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-unban-token.md
- `gala_launchpad_unsubscribe_from_global_feed_reference` — Destructive — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-unsubscribe-from-global-feed-reference.md
- `gala_launchpad_buy` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-buy.md
- `gala_launchpad_emit_stream_countdown` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-emit-stream-countdown.md
- `gala_launchpad_execute_swap` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-execute-swap.md
- `gala_launchpad_global_feed_reference` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-global-feed-reference.md
- `gala_launchpad_launch_token` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-launch-token.md
- `gala_launchpad_sell` — Execute — https://policylayer.com/tools/gala-chain-gala-mcp-server/gala-launchpad-sell.md
- …and 293 more: https://policylayer.com/tools/gala-chain-gala-mcp-server.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=gala-chain-gala-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/gala-chain-gala-mcp-server