---
title: "Create"
method: POST
path: "/api/v1/iam/personal_clients"
tags: ["Personal Client"]
---

# Create

`POST /api/v1/iam/personal_clients`

Create creates a new PersonalClient object for the current User.

## Request body

- C1ApiIamV1PersonalClientServiceCreateRequest — The PersonalClientServiceCreateRequest message contains the fields for creating a new personal client.
  - `allowSourceCidr` string[], nullable — A list of CIDRs to restrict this credential to. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
  - `displayName` string — The display name for the new personal client.
  - `expires` string, duration, nullable
  - `scopedRoles` string[], nullable — The list of roles to restrict the credential to.

## Response `200`

The PersonalClientServiceCreateResponse message contains the created personal client and client secret.

- C1ApiIamV1PersonalClientServiceCreateResponse — The PersonalClientServiceCreateResponse message contains the created personal client and client secret.
  - `client` C1ApiIamV1PersonalClient — The PersonalClient message contains information about a presonal client credential.
    - `allowSourceCidr` string[], nullable — If set, only allows the CIDRs in the array to use the credential. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.
    - `clientId` string — The clientID of the credential.
    - `createdAt` string, date-time, nullable
    - `deletedAt` string, date-time, nullable
    - `displayName` string — The display name of the personal client credential.
    - `expiresTime` string, date-time, nullable
    - `id` string — The unique ID of the personal client credential.
    - `lastUsedAt` string, date-time, nullable
    - `scopedRoles` string[], nullable — scoped_roles provides a list of IAM Roles that this OAuth2 Client's API permissions are reduced to. The permissions granted to OAuth2 Client are AND'ed against the owning User's own permissions.
    - `updatedAt` string, date-time, nullable
    - `userId` string — The ID of the user that this credential is created for.
  - `clientSecret` string — The client secret that corresponds to the personal client. Make sure to save this, because it cannot be returned or queried again.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)