---
title: "Create a workspace-scoped API token. The requesting user must be OWNER or ADMIN of the workspace. Privileges are constrained by app.allowedTokenPrivileges (if set). Requires the `TOKEN_WRITE` privilege on the calling API token. Destructive privileges are opt-in and are never granted by default, so a token without it is refused with 403 (TBP-552)."
method: POST
path: "/v1/account/api-token/workspace"
tags: ["account"]
---

# Create a workspace-scoped API token. The requesting user must be OWNER or ADMIN of the workspace. Privileges are constrained by app.allowedTokenPrivileges (if set). Requires the \`TOKEN_WRITE\` privilege on the calling API token. Destructive privileges are opt-in and are never granted by default, so a token without it is refused with 403 (TBP-552).

`POST /v1/account/api-token/workspace`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/v1/account/api-token/workspace`
- Auth: none declared. Required headers: `x-tenant-id`

## Headers

- `x-tenant-id` string, required

## Request body

- CreateWorkspaceTokenDto

## Response `201`

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)