Vigilfield Docs
API referenceClients

`POST /clients` — mint a client credential + return its one-time secret.

POST/clients

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

POST /clients body. The credential is issued against the installation installation_id names (ADR-0050 §5) and acts as that installation's App. scopes is the declared subset the token can never exceed, capped to ⊆ the installation's grants — not the App's, and not a role bundle's.

Response Body

application/json

curl -X POST "https://example.com/clients" \  -H "Content-Type: application/json" \  -d '{    "installation_id": "string",    "name": "string",    "scopes": [      "string"    ]  }'
{  "client": {    "client_id": "string",    "created_at": "string",    "installation_id": "string",    "last_used_at": "string",    "name": "string",    "scopes": [      "string"    ],    "updated_at": "string"  },  "client_secret": "string"}