Skip to main content
POST
Mint a callback credential

Authorizations

Authorization
string
header
required

Bearer token authentication (format: "Bearer {token}")

Body

application/json
externalSystem
string

Optional operator-legible label for the external system this credential authenticates (e.g. "stripe", "billing-gw")

Maximum string length: 128
Example:

"stripe"

Response

Created

createdAt
string
required

Mint time (RFC 3339, UTC)

credentialId
string<uuid>
required

Surrogate id of the minted credential

token
string
required

Raw bearer token, surfaced exactly once; configure it as the X-Callback-Token header value in the external system. Only its SHA-256 hash is stored server-side.

externalSystem
string

Operator-legible external-system label, echoed for confirmation

webhookUrlHint
string

Informational inbound-callback URL shape to configure in the external system. The {exceptionId} placeholder is filled per callback.