org

Mint a workspace-scoped org service token for CI/automation; shown once [org:write + admin; this door only]

Mint a workspace-scoped org service token for CI/automation; shown once [org:write + admin; this door only]

post/preview/org/tokens

Request

  • Base URL: https://autoresearch.sfcompute.com
  • URL: https://autoresearch.sfcompute.com/preview/org/tokens
  • Auth: HTTP bearer

Query parameters

workspacestring

Act in this workspace (its slug). Omitted: the token's bound workspace, then the organization's default. Never ambient - there is no switch-workspace mutation on this door.

Request body

expires_in_daysinteger nullable

Days until expiry, 1–365 (default 90); 0 = non-expiring, revoke-only.

manages_workspacesboolean nullable

Mint a MANAGER token (docs/designs/workspace-tenancy.md W2): it may create/archive workspaces and vend strictly-narrower short-TTL single-workspace tokens - the credential a platform's backend holds to confine each end-user session to its own workspace. Only this org-admin mint path can set it; a token never mints a token as wide as itself.

namestring required

The token's name - what audit rows and /team display ("ci-deploy").

orgstring nullable
scopesstring[] nullable

Product scope words (the mcp_scopes vocabulary): any of infra, infra:read, org, org:read - never operator. Default ["infra"].

workspacesstring[] nullable

Workspace slugs the token may act in, fixed at mint; the first is its default context. Default: the org's default workspace.

Response

The capability's JSON result.

objectstring

The resource type, when the result is one resource.

Changes

No recorded changes to this operation across all 1 revision of this API.