Skip to main content
POST
Mint self-serve sandbox credentials: a personal key, an OAuth client and a webhook signing key for a new tenant

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Optional. A label helps you tell credential sets apart.

label
string

Free text, stored with the tenant.

Maximum string length: 80

Response

Created

A new sandbox tenant and every credential it needs. Shown once: the server keeps only hashes.

tenant
string
required

Tenant id (tn_...). Intents are visible only to this tenant's credentials.

api_key
string
required

Personal sandbox key (sk_sandbox_...), every scope. Send as Authorization: Bearer <api_key>.

client_id
string
required

OAuth 2.0 client id for POST /oauth/token.

client_secret
string<password>
required
webhook_signing_key
string
required

Signing key for POST /webhooks/{platform} deliveries that reference this tenant's intents (X-Signature-HMAC-SHA256-{n}).

scope
string
required

Space-separated scopes the credentials carry (all of them).

expires_at
string<date-time>
required

When every credential in this set stops working; mint again after.

token_endpoint
string
required
Allowed value: "/v1/oauth/token"
label
string
note
string