---
title: "Create Bridge Credential"
method: POST
path: "/api/v1/iam/tunnel/bridges/{bridge_id}/credentials"
tags: ["Tunnel"]
---

# Create Bridge Credential

`POST /api/v1/iam/tunnel/bridges/{bridge_id}/credentials`

CreateBridgeCredential mints a credential for a bridge. If the bridge
 already has an active credential, it is revoked. The plaintext
 client_secret is returned exactly once on the response.

## Path parameters

- `bridge_id` string, required — The bridge to mint a credential for.

## Request body

- C1ApiIamV1TunnelCredentialsServiceCreateBridgeCredentialRequestInput — The TunnelCredentialsServiceCreateBridgeCredentialRequest message.

## Response `200`

Successful response

- C1ApiIamV1TunnelCredentialsServiceCreateBridgeCredentialResponse — The TunnelCredentialsServiceCreateBridgeCredentialResponse message.
  - `credential` C1ApiIamV1TunnelCredential — TunnelCredential is the API view of one OAuth credential within a bridge. The plaintext client_secret is only populated on the CreateBridgeCredential response.
    - `bridgeId` string — The bridge this credential belongs to.
    - `clientId` string — The client_id (full ${id}@${tenant_domain}/tcc form).
    - `clientSecret` string — The plaintext client_secret. ONLY populated on the CreateBridgeCredential response; empty on Get / List.
    - `createdAt` string, date-time, nullable
    - `credentialStatus` 'TUNNEL_CREDENTIAL_STATUS_UNSPECIFIED' | 'TUNNEL_CREDENTIAL_STATUS_ACTIVE' | 'TUNNEL_CREDENTIAL_STATUS_REVOKED' | 'TUNNEL_CREDENTIAL_STATUS_EXPIRED' — Lifecycle status of this credential record.
    - `deletedAt` string, date-time, nullable
    - `expiresTime` string, date-time, nullable
    - `id` string — The id field.
    - `lastUsedAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
    - `updatedAt` string, date-time, nullable

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)