---
title: "Changes to Create"
method: POST
path: "/api/v1/decoys"
---

# Changes to Create

`POST /api/v1/decoys`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 2 of 36 revisions.

- **2026-08-21** `f2cf3228f366`: 12 breaking, 19 warning, 4 info
- **2026-05-22** `d391405a35d3`: 1 info

## Changes

- **2026-08-21** `f2cf3228f366`: 12 breaking, 19 warning, 4 info
  - the request property `accessToken` became not nullable
  - the request property `connectorClient` became not nullable
  - the request property `userClientCredential` became not nullable
  - the request property `workloadFed` became not nullable
  - the `accessToken` request property type changed from `object` to no type
  - the `connectorClient` request property type changed from `object` to no type
  - the `userClientCredential` request property type changed from `object` to no type
  - the `workloadFed` request property type changed from `object` to no type
  - added `#/components/schemas/c1.api.decoy.v1.Decoy, subschema #2` to the `decoy` response property `oneOf` list for the response status `200`
  - added `#/components/schemas/c1.api.decoy.v1.DecoyVendingMaterial, subschema #2` to the `material` response property `oneOf` list for the response status `200`
  - the `decoy` response's property type changed from `object` to no type for status `200`
  - the `material` response's property type changed from `object` to no type for status `200`
  - removed the request property `accessToken/expiresIn`
  - removed the request property `accessToken/subjectUserId`
  - removed the request property `connectorClient/appId`
  - removed the request property `connectorClient/connectorId`
  - removed the request property `userClientCredential/userId`
  - removed the request property `workloadFed/conditionExpression`
  - removed the request property `workloadFed/providerId`
  - removed the request property `workloadFed/servicePrincipalUserId`
  - removed the optional property `decoy/annotations` from the response with the `200` status
  - removed the optional property `decoy/createdAt` from the response with the `200` status
  - removed the optional property `decoy/description` from the response with the `200` status
  - removed the optional property `decoy/disabled` from the response with the `200` status
  - removed the optional property `decoy/displayName` from the response with the `200` status
  - removed the optional property `decoy/id` from the response with the `200` status
  - removed the optional property `decoy/kind` from the response with the `200` status
  - removed the optional property `decoy/updatedAt` from the response with the `200` status
  - removed the optional property `material/accessToken` from the response with the `200` status
  - removed the optional property `material/clientCredential` from the response with the `200` status
  - removed the optional property `material/workloadFederation` from the response with the `200` status
  - added `#/components/schemas/c1.api.decoy.v1.DecoyAccessTokenInput, subschema #2` to the `accessToken` request property `oneOf` list
  - added `#/components/schemas/c1.api.decoy.v1.DecoyConnectorClientInput, subschema #2` to the `connectorClient` request property `oneOf` list
  - added `#/components/schemas/c1.api.decoy.v1.DecoyUserClientCredentialInput, subschema #2` to the `userClientCredential` request property `oneOf` list
  - added `#/components/schemas/c1.api.decoy.v1.DecoyWorkloadFederationInput, subschema #2` to the `workloadFed` request property `oneOf` list
- **2026-05-22** `d391405a35d3`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/conductorone/apis/c1-api/docs/api/v1/decoys/post.md) - [API](https://skmtc.dev/conductorone/apis/c1-api.md) - [Page](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/decoys/post)