CWObject

Create access key from OIDC

Exchanges an OIDC token from a configured Workload Identity Federation provider for a time-limited CoreWeave AI Object Storage access key. No CoreWeave bearer token is required.

post/v1/cwobject/temporary-credentials/oidc

Request body

durationSecondsinteger required

Lifespan of the resulting access key in seconds. Must be 0-43200 (12 hours maximum).

orgIdstring required

The CoreWeave organization ID to mint the access key for.

oidcTokenstring required

The OIDC token from the configured Workload Identity Federation provider.

attributesobject

Free-form caller-supplied attributes attached to the key (for example, name).

Response

accessKeyIdstring

The access-key ID.

secretKeystring

The secret access key. Treat as a credential and store it securely on receipt.

principalNamestring

The fully-qualified principal name that owns the access key.

expirystring date-time

The expiration time of the access key.

attributesobject

The attributes that were attached to the key on creation.

Changes

No recorded changes to this endpoint across all 1 revision of this API.