Appearance
POST
/developer/me/clientsThis API method requires no scope.
Creates an API client that acts as you. It may hold every tenant scope an API client may (no API client management, internal or global ones); a token request naming none gets them all. Every token request passes the tenant_id to act in, one of those GET /developer/me/tenants lists, in the request body; without it the request is refused with invalid_request. It expires within a year. The response contains the secret — the only time it is shown.
Request body ​
JSON
{
"name": "...",
"expiresAt": "2024-08-14T12:34:56.412"
}
Response ​
The created client, including its secret.
JSON
{
"clientId": "...",
"clientSecret": "...",
"name": "...",
"scopes": [
"..."
],
"expiresAt": "2024-08-14T12:34:56.412"
}
| Error code | Description |
|---|---|
auth.api-client.interactive-sign-in-required | The call must come from a signed-in session. |
auth.api-client.invalid-expiry | The expiry must be in the future and at most a year out. |
auth.api-client.name-required | The API client must have a name. |
auth.api-client.name-taken | You already have an API client with this name. |
auth.api-client.personal-limit-reached | You already have the maximum number of personal API clients. |
auth.api-client.personal-not-allowed | No tenant of yours allows personal API clients. |