platform.credential.issue

Issue a new actor + credential; returns the raw token exactly once.

• Scope: platform.iam.write
• System: yes
• Reachable from: the platform CONTROL face, with a platform credential — never a tenant one. See the surfaces.
• Events: platform.credential.issued

Input (JSON Schema)

{
  "properties": {
    "display_name": {
      "minLength": 1,
      "type": "string"
    },
    "expires_at": {
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$",
      "type": "string"
    },
    "scopes": {
      "default": [],
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "tenant_id": {
      "minLength": 1,
      "type": "string"
    },
    "type": {
      "enum": [
        "platform",
        "tenant"
      ],
      "type": "string"
    }
  },
  "required": [
    "type"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this command does not declare an output schema.

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)