# Create apikey for user programmatically as admin

**URL:** <https://meta.discourse.org/t/create-apikey-for-user-programmatically-as-admin/209733>\
**Category:** Development\
**Tags:** rest-api\
**Created:** [November 20, 2021, 8:55pm UTC](https://meta.discourse.org/t/create-apikey-for-user-programmatically-as-admin/209733 "2021-11-20T20:55:11Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![Noone](https://avatars.discourse-cdn.com/v4/letter/n/ecae2f/32.png) [@Noone](https://meta.discourse.org/u/Noone)\
**Post date:** [November 20, 2021, 9:46pm UTC](https://meta.discourse.org/t/create-apikey-for-user-programmatically-as-admin/209733/7 "2021-11-20T21:46:20Z")

</div>

Yes, from the browser. Sorry if I was not clear. This is all happening from another webapp, user isn’t logged in and no iframing of discourse. the request originates from a browser passing the apikey as request Params

My understanding of apikeys is Once we have apikey of user, we can act on behalf of them from anywhere even from a console/terminal (curl or equivalent). No more CORS

---

_[View the full topic](https://meta.discourse.org/t/create-apikey-for-user-programmatically-as-admin/209733)._