Account credentials

Create an explicit user-bound account credential

Use an explicit credentials:write account bearer grant or a live email-verified application session, plus the current account password as fresh identity proof. Cookie writes require a trusted Origin. Machine callers cannot issue scopes beyond their own grant or outlive it. Creation and rotation return the secret once; metadata never includes it. Scope and expiry can only be narrowed. Issued credentials expire within 24 hours and no later than their issuer session; session revocation invalidates them.

post/account-credentials

Request

  • Base URL: https://app.communicate.so/api/v1
  • URL: https://app.communicate.so/api/v1/account-credentials
  • Auth: one of:
    • HTTP bearer
    • API key in cookie __Secure-better-auth.session_token
    • API key in cookie better-auth.session_token

Headers

Originstring uri

Required for cookie authentication: an exact trusted application origin configured by the server. Bearer requests do not require Origin.

Request body

namestring required
passwordstring password required
scopesstring[] required
audience'https://app.communicate.so/api/v1' | 'https://app.communicate.so/mcp'

Response

Create an explicit user-bound account credential

idstring uuid required
namestring required
prefixstring required
scopesstring[] required
expiresAtstring date-time required
tokenstring required

One-time credential secret; not present in subsequent metadata reads.

Changes

No recorded changes to this operation across all 1 revision of this API.