Sign in

v22

latestOpenAPI 3.0.0raw.githubusercontent.com2026-07-01140308542.4 KB
Zones

Create zone

Creates a new zone for the authenticated organization. A zone is an isolated environment for IAM resources.

post/zones

Request body

namestring safe-text required

Human-readable name. Must not contain HTML tags (e.g. <script>, <div>) or control characters.

descriptionstring safe-text nullable

Human-readable description. Must not contain HTML tags (e.g. <script>, <div>) or control characters.

organization_idstring

Target organization ID. Required for platform principals (whose tokens carry no organization claim); for organization-scoped principals it is optional and must match the authenticated organization if supplied.

requires_invitationboolean

Whether the zone requires an invitation for email/password registration, only applies when user_identity_provider_id is not set. Defaults to true.

default_mcp_gateway_applicationboolean

Assign a default MCP Gateway application to the zone

Response

A zone for organizing resources within an organization

idstring required

Unique identifier of the zone

organization_idstring required

Organization that owns this zone

slugstring required

URL-safe identifier, unique within the zone

namestring required

Human-readable name

descriptionstring nullable

Human-readable description

user_identity_provider_idstring

Provider ID configured for user login

requires_invitationboolean

Whether the zone requires an invitation for email/password registration, only applies when user_identity_provider_id is not set

default_mcp_gateway_application_idstring

Application ID configured as the default MCP Gateway for the zone

default_resource_idstring

Resource ID configured as the default resource for the zone

permissionsIamPermissions

Permissions granted to the authenticated principal. Only populated when expand[]=permissions query parameter is provided. Keys are resource types, values are objects mapping action names to boolean values.

owner_type'platform' | 'customer' required

Who owns this zone. Platform-owned zones cannot be modified via API.

created_atstring date-time required

Entity creation timestamp

updated_atstring date-time required

Entity update timestamp

Example response

{
  "permissions": {
    "zones": {
      "read": true,
      "update": true,
      "delete": false,
      "create": false
    },
    "applications": {
      "read": true,
      "list": true,
      "create": false
    }
  }
}