---
title: "POST /v1/{+name}:signBlob"
method: POST
path: "/v1/{+name}:signBlob"
tags: ["projects"]
---

# POST /v1/{+name}:signBlob

`POST /v1/{+name}:signBlob`

Signs a blob using a service account's system-managed private key.

## Path parameters

- `name` string, required

## Request body

- SignBlobRequest
  - `delegates` string[] — The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`. The `-` wildcard character is required; replacing it with a project ID is invalid.
  - `payload` string, byte — Required. The bytes to sign.

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/iamcredentials.md) · [All operations](https://skmtc.dev/google/apis/iamcredentials/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/iamcredentials/revisions/470ff76e345d/schema)