---
title: "Creates an organization as specified in the request body (accessible to Secretariat)"
method: POST
path: "/org"
tags: ["Organization"]
---

# Creates an organization as specified in the request body (accessible to Secretariat)

`POST /org`

<h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates an organization</p>

## Query parameters

- `registry` boolean

## Headers

- `CVE-API-ORG` string, required
- `CVE-API-USER` string, required
- `CVE-API-KEY` string, required

## Request body

- union
  - CreateOrgRequestJson — unresolved $ref
  - CreateRegistryOrgRequestJson — unresolved $ref

## Response `200`

Returns information about the organization created

- union
  - CreateOrgResponseJson — unresolved $ref
  - CreateRegistryOrgResponseJson — unresolved $ref

## Other responses

- `400` — Bad Request
- `401` — Not Authenticated
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

## Changes

- **2025-09-19** `efebaec5edf0` — 2 info
  - added the new optional `query` request parameter `registry`
  - added `#/components/schemas/create-org-request.json, #/components/schemas/create-registry-org-request.json` to the request body `oneOf` list

[Change history](https://skmtc.dev/cveproject/apis/cve-services-api/changes/org/post.md)

---

[API](https://skmtc.dev/cveproject/apis/cve-services-api.md) · [All operations](https://skmtc.dev/cveproject/apis/cve-services-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cveproject/cve-services-api/revisions/efebaec5edf0/schema)