platform.admin_driver.mint

Mint a short-lived (1h) admin login-driver for the tenant that claims this admin hostname. The tenant is resolved by the KERNEL against the admin directory — the caller never names one, and a hostname no tenant claims is refused indistinguishably from a hostname whose tenant is gone. The granted scopes (operator.otp.request + operator.session.mint) and the expiry are fixed in the kernel, never taken from the input, so there is no escalation by parameter. The raw token is returned exactly once; the credential is an ordinary tenant credential and is refused by the cross-tenant guard against any other tenant.

• Scope: platform.admin_driver.mint
• System: yes
• Reachable from: the platform CONTROL face, with a platform credential — never a tenant one. See the surfaces.
• Events: platform.admin_driver.minted

Input (JSON Schema)

{
  "properties": {
    "host": {
      "description": "The admin hostname this instance is serving, e.g. \"admin.marca.com\" or \"localhost:3031\". The KERNEL resolves it to a tenant against the admin directory — the caller never names a tenant.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "host"
  ],
  "type": "object"
}

Result (200)

{
  "additionalProperties": false,
  "properties": {
    "expires_at": {
      "type": "string"
    },
    "tenant_id": {
      "type": "string"
    },
    "token": {
      "type": "string"
    }
  },
  "required": [
    "tenant_id",
    "token",
    "expires_at"
  ],
  "type": "object"
}

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)