Skip to main content
POST
TypeScript (SDK)

Authorizations

tql_api_key
string
header
required

Headers

Connect-Protocol-Version
enum<number>
default:1
required

Define the version of the Connect protocol

Available options:
1
Connect-Timeout-Ms
number

Define the timeout, in ms

Body

application/json
serviceAccountEmail
string

Email within the caller's organization; case-insensitive, with outer whitespace ignored. Use instead of service_account_member_id; if both are supplied they must identify the same member.

assumedRoleNames
string[]

Exact, case-sensitive role names in the caller's organization. Merged with legacy assumed_roles IDs and deduplicated. The existing member-role and calling API-key scope restrictions apply to both forms.

serviceAccountMemberId
string
name
string | null
expirySeconds
integer | null
assumedRoles
string[]

Bounded by the service account's own roles; org admins get no bypass here. Legacy role IDs. Prefer assumed_role_names.

inheritAllRoles
boolean | null

Required when both role lists are empty, so omission cannot mint a wide key.

clientId
string | null
fullMemberAccess
boolean

Also reach the service account's own items.

Response

Success

CreateApiKeyResponse minus its deprecated api_key_hash alias.

apiKey
api_key · object
apiKeySecret
string

Only ever returned here; the server stores a hash and cannot reissue it.