---
title: "Create access key from OIDC"
method: POST
path: "/v1/cwobject/temporary-credentials/oidc"
tags: ["CWObject"]
---

# Create access key from OIDC

`POST /v1/cwobject/temporary-credentials/oidc`

Exchanges an OIDC token from a configured Workload Identity Federation provider for a time-limited CoreWeave AI Object Storage access key. No CoreWeave bearer token is required.

## Request body

- CreateAccessKeyFromOIDCRequest — Inputs for exchanging an OIDC token for a CoreWeave AI Object Storage access key.
  - `durationSeconds` integer, required — Lifespan of the resulting access key in seconds. Must be `0-43200` (12 hours maximum).
  - `orgId` string, required — The CoreWeave organization ID to mint the access key for.
  - `oidcToken` string, required — The OIDC token from the configured Workload Identity Federation provider.
  - `attributes` object — Free-form caller-supplied attributes attached to the key (for example, `name`).

## Response `200`

OK

- CreateAccessKeyFromOIDCResponse — The newly-minted access key. The `secretKey` is the only opportunity to read the secret value.
  - `accessKeyId` string — The access-key ID.
  - `secretKey` string — The secret access key. Treat as a credential and store it securely on receipt.
  - `principalName` string — The fully-qualified principal name that owns the access key.
  - `expiry` string, date-time — The expiration time of the access key.
  - `attributes` object — The attributes that were attached to the key on creation.

## Other responses

- `default` — Default error response

---

[API](https://skmtc.dev/coreweave/apis/coreweave-telemetry-relay-api.md) · [All operations](https://skmtc.dev/coreweave/apis/coreweave-telemetry-relay-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/coreweave/coreweave-telemetry-relay-api/revisions/3b98ea4fe0c3/schema)