Apps

Create App Credential

PREVIEW. This endpoint is deployed but gated: it returns 404 unless the hosted app platform is enabled for your organization. It is published here so the contract describes the whole surface, not so it can be called today.

Create a service credential for one consented client organization.

The secret is returned once and never again. Only its SHA-256 is stored — developer_app_credentials has no column that could hold a plaintext secret. Rotate by creating a new credential and revoking the old one.

The target organization must already have a consented installation of this app. A credential for a workspace that never consented would be a standing key into a tenant that never agreed to it, and the M6-1d clamp would refuse every request it minted anyway — failing here says why, instead of leaving a credential that silently cannot work.

post/apps/{app_id}/credentials

Request

  • Base URL: https://be.graph8.com/api/v1
  • URL: https://be.graph8.com/api/v1/apps/{app_id}/credentials
  • Auth: HTTP bearer

Path parameters

app_idstring required

Headers

Authorizationstring nullable
X-Org-Idstring nullable

Request body

client_org_idstring required

The client organization this credential acts for. It must already have a consented installation of the app — a credential is bound to one tenant and cannot be pointed at another later.

Response

Successful Response

Changes

No recorded changes to this operation across all 2 revisions of this API.