---
title: "Create credentials"
method: POST
path: "/api/v1/credentials"
tags: ["ENTERPRISE", "Connectivity v1.Credentials"]
---

# Create credentials

`POST /api/v1/credentials`

Creates the Credentials for the user. The create request will trigger a refresh towards the provider.

## Query parameters

- `items` string[]

## Request body

- CreateCredentialsRequest — The credentials to create. Only providerName and fields are required.
  - `appUri` string — The end user will be redirected to this URI after the authorization code has been delivered. This field is used for flows where we have third party redirects to financial institutions. There is a default value which is `tink://open`. It can be any type of URI (mobile deeplink, http address etc.).<br/> To configure, add the required URI to the app’s Redirect URIs list in the Tink Console. The URI scheme and host must match a registered redirect URI; the path must match the registered path prefix. Query parameters and fragments are not evaluated.<br/> If `appUri` does not match a registered redirect URI or an explicitly supported Tink URI, the request is rejected with `400 Bad Request`
  - `callbackUri` string — This URI will be used by the ASPSP to pass the authorization code. It corresponds to the redirect/callback URI in OAuth2/OpenId. This parameter is only applicable if you are a TPP.
  - `fields` object, required — This is a key-value map of `Field` name and value found on the `Provider` to which the credentials belongs to. This parameter is required when creating credentials.
  - `originatingUserIp` string — The originating user's remote IP address of the corresponding HTTP request.
  - `providerName` string, required — The provider (financial institution) that the credentials is connected to.
  - `selectedAuthenticationOptions` SelectedAuthenticationOption[] — [BETA] Specifies the selected authentication options for each available group when a provider has more than one authentication option available in any of the available groups.
    - `authenticationOptionDefinition` string — Specifies the selected authentication option. This is only required if selectedAuthenticationOptions is used.
    - `authenticationOptionsGroup` string — Specifies the authentication option group for which we have selected an authentication option. This is only required if selectedAuthenticationOptions is used.
    - `fields` object — Specifies the values for the fields that are required to be sent when this authentication option is selected, if any.
  - `triggerRefresh` boolean — Defines if the Credentials creation should cause a refresh on aggregated data. Defaults to `true`

## Response `200`

The credentials was successfully created.

- Connectivity20v1Credentials — unresolved $ref

## Other responses

- `400` — The payload does not pass validation or the user could not be authenticated.
- `404` — The provider could not be found.
- `409` — There is already a credentials with the same provider name and same values of the fields.

---

[API](https://skmtc.dev/tink/apis/tink-api.md) · [All operations](https://skmtc.dev/tink/apis/tink-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tink/tink-api/revisions/3cd2b56986d4/schema)