Skip to main content
POST
Create a user-owned 90-day API token

Authorizations

Authorization
string
header
required

WorkOS access JWT or a user-owned WorkOS API key. User keys are bound to one organization and restricted to their enabled product permissions. Session-only onboarding and session revocation require an interactive access JWT. No cookie session is assumed.

Headers

X-Request-Id
string

Optional caller-provided correlation identifier.

Required string length: 1 - 128
Idempotency-Key
string
required

Identifies one mutation and its canonical request payload.

Required string length: 1 - 128

Path Parameters

organization_id
string
required
Pattern: ^[0-9A-HJKMNP-TV-Z]{26}$

Body

application/json
name
string
required
Required string length: 1 - 64

Response

Original token observed; the full value cannot be retrieved again.

replayed
boolean
required
value
string
required
Pattern: ^sk_[A-Za-z0-9_-]{20,128}$
request_id
string
required
Pattern: ^[0-9A-HJKMNP-TV-Z]{26}$
key
object
required