post/service-accountsWrite operation

Create a service account and its initial credential

Creates native v2 key material in the credential home cell. The token is returned only by this private no-store response and exact idempotent replays retained for seven days.

Required scopes

service-accounts:write

Request example

curl --request POST \
  --url 'https://api.de.teamgrid.app/v1/service-accounts' \
  --header 'Authorization: Bearer $TEAMGRID_API_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{
    "description": "string",
    "expiresAt": "2026-07-29T09:00:00.000Z",
    "name": "string",
    "scopes": [
      "example"
    ]
  }'

const response = await fetch('https://api.de.teamgrid.app/v1/service-accounts', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.TEAMGRID_API_TOKEN}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
  "description": "string",
  "expiresAt": "2026-07-29T09:00:00.000Z",
  "name": "string",
  "scopes": [
    "example"
  ]
}),
})

const result = await response.json()

type ApiResponse = unknown

const response = await fetch('https://api.de.teamgrid.app/v1/service-accounts', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.TEAMGRID_API_TOKEN}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
  "description": "string",
  "expiresAt": "2026-07-29T09:00:00.000Z",
  "name": "string",
  "scopes": [
    "example"
  ]
}),
})

const result: ApiResponse = await response.json()

teamgrid service-accounts create \
  --data @payload.json \
  --idempotency-key REQUEST_KEY

Example response 2xx

{
  "data": {
    "attributes": {
      "createdAt": "2026-07-29T09:00:00.000Z",
      "description": null,
      "expiresAt": "2026-07-29T09:00:00.000Z",
      "generation": 1,
      "graceEndsAt": "2026-07-29T09:00:00.000Z",
      "lastFour": "string",
      "lastUsedAt": "2026-07-29T09:00:00.000Z",
      "name": "string",
      "notBeforeAt": "2026-07-29T09:00:00.000Z",
      "principalId": "example",
      "scopes": [
        "example"
      ],
      "status": "active"
    },
    "id": "string",
    "type": null
  },
  "meta": {
    "requestId": "string"
  }
}

EndpointGerman region

Interactive request builder

Prepare this request

Build locally · nothing is sent

Region

Credential variable

Idempotency-Keyheader · required

JSON request bodyValid JSON

Generated cURL

The builder does not execute requests or persist credentials. Replace the environment-variable placeholder only in your terminal or secret-aware runtime.

Headers

Idempotency-Keyrequired

string

Unique request key retained for seven days. Within that window, reuse with different data is rejected.

Request body

application/json

description

string

Human-readable description of the resource.

expiresAt

stringdate-time

Timestamp after which this capability or record is no longer valid.

namerequired

string

Human-readable name of the resource.

scopesrequired

array<string>

The scopes associated with this service account.

Responses

200An exact replay of a completed issuance.application/json

Response schemaapplication/json

required

ServiceAccountCredential

Public API representation of service account credential.

required

ResponseMeta

Public API representation of meta.

201A newly issued native credential.application/json

Response schemaapplication/json

required

ServiceAccountCredential

Public API representation of service account credential.

required

ResponseMeta

Public API representation of meta.

400The request is invalid.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

401The bearer credential is missing, invalid, expired, or revoked.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

403The credential has insufficient scope.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

409The request conflicts with the current resource state.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

429The credential or source exceeded its rate limit.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

502The cell-local application returned an invalid response.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

503A required cell-local dependency is unavailable.application/json

Response schemaapplication/json

required

array<ApiError>

The errors associated with this error.

required

ResponseMeta

Request metadata, including the request identifier and pagination state when applicable.

Operation IDcreateServiceAccountOpenAPI JSON ↗

Documentation feedbackWas this page useful?