---
title: "POST /identities/CreatePaymentCredentialProvider"
method: POST
path: "/identities/CreatePaymentCredentialProvider"
---

# POST /identities/CreatePaymentCredentialProvider

`POST /identities/CreatePaymentCredentialProvider`

Creates a new payment credential provider for storing authentication credentials used by payment connectors to communicate with external payment providers.

## Request body

- object
  - `name` string, required — Unique name for the payment credential provider.
  - `credentialProviderVendor` 'CoinbaseCDP' | 'StripePrivy', required — Supported vendor types for payment providers using non-standard auth protocols.
  - `providerConfigurationInput` object, required — Provider configuration input — contains secrets for creation and update. Varies by vendor type.
    - `coinbaseCdpConfiguration` object — The Coinbase CDP configuration.
      - `apiKeyId` string, required — The API key identifier provided by Coinbase Developer Platform.
      - `apiKeySecret` string, password — The API key secret provided by Coinbase Developer Platform.
      - `apiKeySecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the API key secret for the Coinbase Developer Platform. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in Amazon Web Services Secrets Manager.
      - `apiKeySecretConfig` object — A reference to the Amazon Web Services Secrets Manager secret that stores the API key secret. This includes the secret ID and the JSON key used to extract the API key secret value from the secret. Required when <code>apiKeySecretSource</code> is set to <code>EXTERNAL</code>.
        - `secretId` string, required — The ID of the Amazon Web Services Secrets Manager secret that stores the secret value.
        - `jsonKey` string, required — The JSON key used to extract the secret value from the Amazon Web Services Secrets Manager secret.
      - `walletSecret` string, password — The wallet secret provided by Coinbase Developer Platform.
      - `walletSecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the wallet secret for the Coinbase Developer Platform. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in Amazon Web Services Secrets Manager.
      - `walletSecretConfig` object — A reference to the Amazon Web Services Secrets Manager secret that stores the wallet secret. This includes the secret ID and the JSON key used to extract the wallet secret value from the secret. Required when <code>walletSecretSource</code> is set to <code>EXTERNAL</code>.
        - `secretId` string, required — The ID of the Amazon Web Services Secrets Manager secret that stores the secret value.
        - `jsonKey` string, required — The JSON key used to extract the secret value from the Amazon Web Services Secrets Manager secret.
    - `stripePrivyConfiguration` object — The Stripe Privy configuration.
      - `appId` string, required — The app ID provided by Privy.
      - `appSecret` string, password — The app secret provided by Privy.
      - `appSecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the app secret. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in Amazon Web Services Secrets Manager.
      - `appSecretConfig` object — A reference to the Amazon Web Services Secrets Manager secret that stores the app secret. This includes the secret ID and the JSON key used to extract the app secret value from the secret. Required when <code>appSecretSource</code> is set to <code>EXTERNAL</code>.
        - `secretId` string, required — The ID of the Amazon Web Services Secrets Manager secret that stores the secret value.
        - `jsonKey` string, required — The JSON key used to extract the secret value from the Amazon Web Services Secrets Manager secret.
      - `authorizationPrivateKey` string, password — The authorization private key for the Stripe Privy integration.
      - `authorizationPrivateKeySource` 'MANAGED' | 'EXTERNAL' — The source type of the authorization private key. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in Amazon Web Services Secrets Manager.
      - `authorizationPrivateKeyConfig` object — A reference to the Amazon Web Services Secrets Manager secret that stores the authorization private key. This includes the secret ID and the JSON key used to extract the authorization private key value from the secret. Required when <code>authorizationPrivateKeySource</code> is set to <code>EXTERNAL</code>.
        - `secretId` string, required — The ID of the Amazon Web Services Secrets Manager secret that stores the secret value.
        - `jsonKey` string, required — The JSON key used to extract the secret value from the Amazon Web Services Secrets Manager secret.
      - `authorizationId` string, required — The authorization ID for the Stripe Privy integration.
  - `tags` object — Optional tags for resource organization.

## Response `201`

Success

- CreatePaymentCredentialProviderResponse
  - `name` string, required — The name of the created payment credential provider.
  - `credentialProviderVendor` 'CoinbaseCDP' | 'StripePrivy', required — The vendor type for the created payment credential provider.
  - `credentialProviderArn` string, required — The Amazon Resource Name (ARN) of the created payment credential provider.
  - `providerConfigurationOutput` object, required — Output configuration (contains secret ARNs, excludes actual secret values).
    - `coinbaseCdpConfiguration` object — The Coinbase CDP configuration.
      - `apiKeyId` string, required — The API key identifier provided by Coinbase Developer Platform.
      - `apiKeySecretArn` Secret, required — Contains information about a secret in Amazon Web Services Secrets Manager.
        - `secretArn` string, required — The Amazon Resource Name (ARN) of the secret in Amazon Web Services Secrets Manager.
      - `apiKeySecretJsonKey` string — The JSON key used to extract the API key secret value from the Amazon Web Services Secrets Manager secret.
      - `apiKeySecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the API key secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in Amazon Web Services Secrets Manager.
      - `walletSecretArn` Secret, required — Contains information about a secret in Amazon Web Services Secrets Manager.
        - `secretArn` string, required — The Amazon Resource Name (ARN) of the secret in Amazon Web Services Secrets Manager.
      - `walletSecretJsonKey` string — The JSON key used to extract the wallet secret value from the Amazon Web Services Secrets Manager secret.
      - `walletSecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the wallet secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in Amazon Web Services Secrets Manager.
    - `stripePrivyConfiguration` object — The Stripe Privy configuration.
      - `appId` string, required — The app ID provided by Privy.
      - `appSecretArn` Secret, required — Contains information about a secret in Amazon Web Services Secrets Manager.
        - `secretArn` string, required — The Amazon Resource Name (ARN) of the secret in Amazon Web Services Secrets Manager.
      - `appSecretJsonKey` string — The JSON key used to extract the app secret value from the Amazon Web Services Secrets Manager secret.
      - `appSecretSource` 'MANAGED' | 'EXTERNAL' — The source type of the app secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in Amazon Web Services Secrets Manager.
      - `authorizationPrivateKeyArn` Secret, required — Contains information about a secret in Amazon Web Services Secrets Manager.
        - `secretArn` string, required — The Amazon Resource Name (ARN) of the secret in Amazon Web Services Secrets Manager.
      - `authorizationPrivateKeyJsonKey` string — The JSON key used to extract the authorization private key value from the Amazon Web Services Secrets Manager secret.
      - `authorizationPrivateKeySource` 'MANAGED' | 'EXTERNAL' — The source type of the authorization private key. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in Amazon Web Services Secrets Manager.
      - `authorizationId` string, required — The authorization ID for the Stripe Privy integration.

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — UnauthorizedException
- `482` — ResourceLimitExceededException
- `483` — ValidationException
- `484` — ConflictException
- `485` — AccessDeniedException
- `486` — DecryptionFailure
- `487` — ResourceNotFoundException
- `488` — ThrottlingException
- `489` — InternalServerException
- `490` — EncryptionFailure

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore-control.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore-control/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore-control/versions/0ebde766792b/schema)