---
title: "Create credentials"
method: POST
path: "/api/v1/credentials"
tags: ["ENTERPRISE", "Connectivity v1.Credentials"]
---

# Create credentials

`POST /api/v1/credentials`

Creates the Credentials for the user. The create request will trigger a refresh towards the provider.

## Query parameters

- `items` string[]

## Request body

- CreateCredentialsRequest — The credentials to create. Only providerName and fields are required.
  - `appUri` string — The end user will be redirected to this URI after the authorization code has been delivered. This field is used for flows where we have third party redirects to financial institutions. There is a default value which is tink://open. It can be any type of URI (mobile deeplink, http address etc.)
  - `callbackUri` string — This URI will be used by the ASPSP to pass the authorization code. It corresponds to the redirect/callback URI in OAuth2/OpenId. This parameter is only applicable if you are a TPP.
  - `fields` object, required — This is a key-value map of `Field` name and value found on the `Provider` to which the credentials belongs to. This parameter is required when creating credentials.
  - `originatingUserIp` string — The originating user's remote IP address of the corresponding HTTP request.
  - `providerName` string, required — The provider (financial institution) that the credentials is connected to.
  - `selectedAuthenticationOptions` SelectedAuthenticationOption[] — [BETA] Specifies the selected authentication options for each available group when a provider has more than one authentication option available in any of the available groups.
    - `authenticationOptionDefinition` string — Specifies the selected authentication option. This is only required if selectedAuthenticationOptions is used.
    - `authenticationOptionsGroup` string — Specifies the authentication option group for which we have selected an authentication option. This is only required if selectedAuthenticationOptions is used.
    - `fields` object — Specifies the values for the fields that are required to be sent when this authentication option is selected, if any.
  - `triggerRefresh` boolean — Defines if the Credentials creation should cause a refresh on aggregated data. Defaults to `true`

## Response `200`

The credentials was successfully created.

- Connectivity20v1Credentials — unresolved $ref

## Other responses

- `400` — The payload does not pass validation or the user could not be authenticated.
- `404` — The provider could not be found.
- `409` — There is already a credentials with the same provider name and same values of the fields.

---

[API](https://skmtc.net/tink/apis/tink-api.md) · [All operations](https://skmtc.net/tink/apis/tink-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tink/tink-api/revisions/23d8982b533d/schema)