---
title: "Issue a scoped credential shown once"
method: POST
path: "/v1/credentials"
tags: ["Account"]
---

# Issue a scoped credential shown once

`POST /v1/credentials`

## Request

- Base URL: `https://api.supplyslate.com`
- URL: `https://api.supplyslate.com/v1/credentials`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://mcp.supplyslate.com/authorize`, token URL `https://mcp.supplyslate.com/oauth/token`)
  - HTTP bearer

## Headers

- `Idempotency-Key` string

## Request body

- CredentialCreate
  - `name` string, required
  - `scopes` string[], required
  - `expires_at` string, date-time

## Response `201`

Created durably

- CredentialCreateResponse
  - `credential` Credential, required
    - `id` string, required
    - `name` string, required
    - `scopes` string[], required
    - `last_used_at` string, date-time, nullable
    - `revoked_at` string, date-time, nullable
    - `secret` string
  - `request_id` string

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Scope or tenant boundary denied
- `404`: Resource not found
- `409`: State conflict or idempotency mismatch
- `429`: Rate limited

---

[API](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api.md) · [All operations](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api/llms.txt) · [OpenAPI document](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api/revisions/f7989551f167?raw)