Create an API token

Returns the full seal_… secret once. Store it — it cannot be retrieved again. Requires admin/owner (or a token with the admin scope).

POST/organizations/{organizationSlug}/tokens

Authorization

AuthorizationBearer token · headerrequired

Pass your API key as a Bearer token. API keys are scoped to specific operations — configure scopes in your organization's Settings → Developer → API Keys.

Path parameters

organizationSlugstringrequired

Request body

requiredapplication/json

namestringrequired

scopesApiTokenScope[]required

min items 1

Responses

201

Created

idstringrequired

publicIdstringrequired

namestringrequired

scopesApiTokenScope[]required

lastUsedAtstring<date-time> | null

revokedAtstring<date-time> | null

createdAtstring<date-time>required

tokenstring

Full secret — only returned once on create

400

Invalid request parameters

typestringrequired

Machine-readable error code

statusintegerrequired

HTTP status code

titlestringrequired

Human-readable error message

detailsobject

Field-level validation errors

401

Missing or invalid API key

typestringrequired

Machine-readable error code

statusintegerrequired

HTTP status code

titlestringrequired

Human-readable error message

detailsobject

Field-level validation errors

403

Forbidden

typestringrequired

Machine-readable error code

statusintegerrequired

HTTP status code

titlestringrequired

Human-readable error message

detailsobject

Field-level validation errors

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer tokenRemember on this deviceInclude my values in samples

Parameters

organizationSlugpath*

Bodyapplication/json

Request body

Request

curl -X POST "https://api.seal.nyc/api/v1/organizations/string/tokens" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "string",
  "scopes": [
    "read"
  ]
}'

const response = await fetch("https://api.seal.nyc/api/v1/organizations/string/tokens", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: "{\n  \"name\": \"string\",\n  \"scopes\": [\n    \"read\"\n  ]\n}"
});

import requests

response = requests.post(
    "https://api.seal.nyc/api/v1/organizations/string/tokens",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Content-Type": "application/json"
    },
    data="{\n  \"name\": \"string\",\n  \"scopes\": [\n    \"read\"\n  ]\n}",
)

Response

{
  "id": "string",
  "publicId": "string",
  "name": "string",
  "scopes": [
    "read"
  ],
  "lastUsedAt": "2019-08-24T14:15:22Z",
  "revokedAt": "2019-08-24T14:15:22Z",
  "createdAt": "2019-08-24T14:15:22Z",
  "token": "string"
}

{
  "type": "VALIDATION_ERROR",
  "status": 400,
  "title": "Validation failed",
  "details": {
    "email": [
      "Must be a valid email address"
    ]
  }
}

{
  "type": "AUTH_ERROR",
  "status": 401,
  "title": "Missing or invalid API key"
}

{
  "type": "VALIDATION_ERROR",
  "status": 400,
  "title": "string",
  "details": {}
}