v32

latestOpenAPI 3.1.0raw.githubusercontent.com2026-05-224341,4072.0 MB
Service Principal

Create Credential

CreateCredential creates a new client credential for a service principal.

post/api/v1/service_principals/{service_principal_id}/credentials

Path parameters

service_principal_idstring required

The service principal ID to create the credential for.

Request body

allowSourceCidrsstring[] nullable

A list of CIDRs to restrict this credential to. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.

displayNamestring

The display name for the new credential.

expiresstring duration
requireDpopboolean

If true, requires DPoP proof-of-possession for token exchange using this credential.

scopedRolesstring[] nullable

The list of roles to restrict the credential to.

Response

Successful response

clientSecretstring

The client secret. Shown exactly once at creation -- cannot be retrieved again.