operator.access_key.redeem

Redeem an operator access key for a fresh operator session (no OTP/OIDC). Public, store-scoped, rate-limited.

• Scope: public
• System: no
• Reachable from: an ANONYMOUS face — no credential, and never /v1/commands/*. Which path serves it is not derivable from the registry; see the anonymous faces.
• Events: admin_user.activated

Input (JSON Schema)

{
  "properties": {
    "key": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "key"
  ],
  "type": "object"
}

Result (200)

{
  "additionalProperties": false,
  "properties": {
    "admin_user_id": {
      "type": "string"
    },
    "expires_at": {
      "type": "string"
    },
    "token": {
      "type": "string"
    }
  },
  "required": [
    "admin_user_id",
    "token",
    "expires_at"
  ],
  "type": "object"
}

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)