PRprimitive
Roles and members

Open break-glass access

Time-limited (at most 24 hours), audited access to every mailbox for the owner opening it; every other owner is told. Person only: a dashboard session, or the person's own OAuth or CLI token with a session step-up of purpose break_glass.write (the person confirms at the step_up_url a 403 step_up_required answer carries, which names this client, then send the token in the Primitive-Step-Up header; the token works only with the client it was confirmed for). Needs access_mode:manage (owners). API keys are refused.

post/break-glass

Request

  • Base URL
    https://api.primitive.dev/v1
  • URL
    https://api.primitive.dev/v1/break-glass
  • Auth
    HTTP bearer

Headers

Idempotency-Keystring

Optional client-supplied idempotency key. Retrying a request with the same key returns the original result instead of performing the action a second time; if omitted the server derives one from the canonical payload hash. Safe to retry network failures without duplicating side effects.

Request body

reasonstring required
hoursinteger

Response

Open break-glass access

successtrue required

Changes

No operation changes recorded.