---
title: "Changes to Create application credential"
method: POST
path: "/zones/{zoneId}/application-credentials"
---

# Changes to Create application credential

`POST /zones/{zoneId}/application-credentials`

> Every recorded change to this endpoint, newest first.

## Timeline

Changed in 9 of 23 revisions.

- **2026-08-26** `d65d51379d93` — 5 info
- **2026-07-01** `2f5033ed4491` — 6 info
- **2026-05-22** `ffb6f697525f` — 1 info
- **2026-04-20** `932699a5ea16` — 5 info
- **2026-04-02** `aee6e66de0d3` — 1 info
- **2026-03-16** `d3d69f45bfed` — 5 warning, 3 info
- **2026-03-09** `cb43483cd1b3` — 8 info
- **2026-02-24** `0aa1f5c87e81` — 3 info
- **2026-02-06** `edd1b760a989` — 2 warning, 2 info

## Changes

- **2026-08-26** `d65d51379d93` — 5 info
  - added the non-success response with the status `400`
  - added the non-success response with the status `403`
  - added the non-success response with the status `404`
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/metadata/icon_url` to the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/openid/external_id_claim` to the response with the `200` status
- **2026-07-01** `2f5033ed4491` — 6 info
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/metadata/icon_url` to the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/openid/single_logout_enabled` to the response with the `200` status
  - added the optional property `anyOf[subschema #2: Application Credential Password]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/metadata/icon_url` to the response with the `200` status
  - added the optional property `anyOf[subschema #3: Application Credential Public Key]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/metadata/icon_url` to the response with the `200` status
  - added the optional property `anyOf[subschema #4: Application Credential URL]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/metadata/icon_url` to the response with the `200` status
  - added the optional property `anyOf[subschema #5: Application Credential Public]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/metadata/icon_url` to the response with the `200` status
- **2026-05-22** `ffb6f697525f` — 1 info
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/openid/scopes` to the response with the `200` status
- **2026-04-20** `932699a5ea16` — 5 info
  - added the required property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/consent` to the response with the `200` status
  - added the required property `anyOf[subschema #2: Application Credential Password]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/consent` to the response with the `200` status
  - added the required property `anyOf[subschema #3: Application Credential Public Key]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/consent` to the response with the `200` status
  - added the required property `anyOf[subschema #4: Application Credential URL]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/consent` to the response with the `200` status
  - added the required property `anyOf[subschema #5: Application Credential Public]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/consent` to the response with the `200` status
- **2026-04-02** `aee6e66de0d3` — 1 info
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/openid/user_identifier_claim` to the response with the `200` status
- **2026-03-16** `d3d69f45bfed` — 5 warning, 3 info
  - removed the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/traits` from the response with the `200` status
  - removed the optional property `anyOf[subschema #2: Application Credential Password]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/traits` from the response with the `200` status
  - removed the optional property `anyOf[subschema #3: Application Credential Public Key]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/traits` from the response with the `200` status
  - removed the optional property `anyOf[subschema #4: Application Credential URL]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/traits` from the response with the `200` status
  - removed the optional property `anyOf[subschema #5: Application Credential Public]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/traits` from the response with the `200` status
  - the endpoint scheme security `OAuth2` was added to the API
  - the endpoint scheme security `bearerAuth` was added to the API
  - the endpoint scheme security `iam_bearerAuth` was removed from the API
- **2026-03-09** `cb43483cd1b3` — 8 info
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/authorization_parameters` to the response with the `200` status
  - added the required property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/owner_type` to the response with the `200` status
  - added the required property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/owner_type` to the response with the `200` status
  - added the required property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/issuer` to the response with the `200` status
  - added the required property `anyOf[subschema #2: Application Credential Password]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/owner_type` to the response with the `200` status
  - added the required property `anyOf[subschema #3: Application Credential Public Key]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/owner_type` to the response with the `200` status
  - added the required property `anyOf[subschema #4: Application Credential URL]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/owner_type` to the response with the `200` status
  - added the required property `anyOf[subschema #5: Application Credential Public]/allOf[subschema #1: Application Credential Base Fields]/application/allOf[subschema #1: Application]/owner_type` to the response with the `200` status
- **2026-02-24** `0aa1f5c87e81` — 3 info
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/scope_parameter` to the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/scope_separator` to the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/token_response_access_token_pointer` to the response with the `200` status
- **2026-02-06** `edd1b760a989` — 2 warning, 2 info
  - removed the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/domains` from the response with the `200` status
  - removed the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/metadata/internal_claims` from the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/authorization_resource_enabled` to the response with the `200` status
  - added the optional property `anyOf[subschema #1: Application Credential Token]/allOf[subschema #2]/provider/allOf[subschema #1: Provider]/protocols/oauth2/authorization_resource_parameter` to the response with the `200` status

---

[Operation](https://skmtc.dev/keycardai/apis/untitled-api/docs/zones/:zoneId/application-credentials/post.md) · [API](https://skmtc.dev/keycardai/apis/untitled-api.md) · [Page](https://skmtc.dev/keycardai/apis/untitled-api/changes/zones/:zoneId/application-credentials/post)