---
title: "Enable the platform tenant and operator login"
method: POST
path: "/bootstrap"
tags: ["Setup"]
---

# Enable the platform tenant and operator login

`POST /bootstrap`

Creates or reconciles the platform tenant, seeds the platform-integrated
authorization server, creates the initial natural-person operator identity, sets
the operator credential, activates the staged license artifact, and closes the
first-run setup gate. Production tenants are created afterwards through the
authenticated platform admin API.

## Request body

- BootstrapTenantRequest
  - `adminEmail` string, email, required
  - `adminDisplayName` string, required
  - `adminPassword` string, required
  - `naturalPerson` BootstrapNaturalPerson
    - `source` 'TECHNICAL_CONTACT' | 'ADMINISTRATIVE_CONTACT' | 'NEW'
    - `firstName` string, nullable
    - `lastName` string, nullable

## Response `201`

Platform bootstrap result.

- BootstrapTenantResponse
  - `tenantId` string, required
  - `status` 'ACTIVE' | 'SUSPENDED' | 'PENDING_VERIFICATION', required
  - `hostedAsIssuerUrl` string, uri, nullable
  - `adminEmail` string, email, required
  - `canCreateProductionTenants` boolean, required

## Other responses

- `404` — Setup gate is closed.

## Changes

> 12 revisions in range; 1 could not be searched.

- **2026-06-20** `242a55e92695` — 3 warning
  - removed the request property `licenseRootCaPem`
  - removed the request property `licenseToken`
  - removed the request property `platformCertificate`
- **2026-06-19** `ef25767f07be` — 1 info
  - the request property `licenseToken` became optional
- **2026-06-12** `1d88b418e646` — 3 breaking, 7 warning, 6 info
  - added the new required request property `operatorDisplayName`
  - added the new required request property `operatorEmail`
  - added the new required request property `operatorPassword`
  - removed the request property `description`
  - …12 more
- **2026-06-12** `e18dc47aad73` — 3 breaking, 1 info
  - removed the enum value `BEST_EFFORT` of the request property `ownerDeliveryMode`
  - removed the enum value `EMAIL` of the request property `ownerDeliveryMode`
  - removed the enum value `NONE` of the request property `ownerDeliveryMode`
  - the `ownerDeliveryMode` request property default value `MANUAL` was added

[Change history](https://skmtc.dev/sphereon-opensource/apis/platform-setup-api/changes/bootstrap/post.md)

---

[API](https://skmtc.dev/sphereon-opensource/apis/platform-setup-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/platform-setup-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/platform-setup-api/revisions/f6d32c93ac68/schema)