---
title: "Create System Account Access Token"
method: POST
path: "/v3/system-accounts/{accountId}/access-tokens"
tags: ["System Accounts - Access Tokens"]
---

# Create System Account Access Token

`POST /v3/system-accounts/{accountId}/access-tokens`

Creates an access token for the specified system account (SA). The access token can be used for authenticating API and CLI requests. The token will only be displayed once on creation. Returns a 409 if the system account already has a token with the same name.

## Request body

- object
  - `name` string, required
  - `expires_at` string, date-time, required

## Response `201`

A response including a single system account access token with the token.

- object
  - `id` string, uuid — ID of the system account access token.
  - `name` string, nullable — Name of the system account access token.
  - `created_at` string, date-time — Timestamp of when the system account access token was created.
  - `updated_at` string, date-time — Timestamp of when the system account access token was last updated.
  - `expires_at` string, date-time — Timestamp of when the system account access token will expire.
  - `last_used_at` string, date-time — Timestamp of when the system account access token was last used.
  - `token` string — The token of the system account access token.

## Other responses

- `401` — Unauthenticated
- `403` — Unauthorized
- `404` — Not Found
- `409` — Conflict

---

[API](https://skmtc.net/kong/apis/konnect-api.md) · [All operations](https://skmtc.net/kong/apis/konnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kong/konnect-api/revisions/06734a9c491f/schema)