diff --git a/backend/api/customers.go b/backend/api/customers.go
index dd952cd..5c634d2 100644
--- a/backend/api/customers.go
+++ b/backend/api/customers.go
@@ -57,16 +57,10 @@ func (h *Handler) createCustomer(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	// Automatisch zwei API-Keys erstellen:
-	// - agent: fuer die Agents (OPNsense, Linux) auf Kundensystemen
-	// - read:  fuer externe Lesezugriffe / Dashboards
-	agentKey, err1 := generateCustomerKey(h.db, c.ID, req.Number, req.Name, "agent")
-	readKey, err2 := generateCustomerKey(h.db, c.ID, req.Number, req.Name, "read")
-	if err1 != nil {
-		log.Printf("Auto-Agent-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, err1)
-	}
-	if err2 != nil {
-		log.Printf("Auto-Read-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, err2)
+	// Automatisch Agent-Key erstellen
+	agentKey, err := generateCustomerKey(h.db, c.ID, req.Number, req.Name, "agent")
+	if err != nil {
+		log.Printf("Auto-Agent-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, err)
 	}
 
 	h.auditLog(r, "customer.create", "customer", req.Number, req.Name, "")
@@ -74,7 +68,6 @@ func (h *Handler) createCustomer(w http.ResponseWriter, r *http.Request) {
 	resp := map[string]interface{}{
 		"customer":  c,
 		"agent_key": agentKey,
-		"read_key":  readKey,
 	}
 	writeJSON(w, http.StatusCreated, resp)
 }