Issue Org Service Account Token

Exchange a service account client secret for a short-lived JWT token. No authentication required.

POST /v2/orgs/{orgSlug}/service-accounts/{saSlug}/token

Issue Org Service Account Token

cURL

curl --request POST \
  --url https://api.studio.prisme.ai/v2/orgs/{orgSlug}/service-accounts/{saSlug}/token \
  --header 'Content-Type: application/json' \
  --data '
{
  "clientSecret": "<string>"
}
'

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({clientSecret: '<string>'})
};

fetch('https://api.studio.prisme.ai/v2/orgs/{orgSlug}/service-accounts/{saSlug}/token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.studio.prisme.ai/v2/orgs/{orgSlug}/service-accounts/{saSlug}/token"

payload = { "clientSecret": "<string>" }
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

200

{
  "accessToken": "<string>",
  "expiresAt": "2023-11-07T05:31:56Z",
  "tokenType": "Bearer",
  "permissions": [
    "<string>"
  ],
  "scopes": [
    "<string>"
  ]
}

{
  "error": "AuthenticationError",
  "message": "Unauthenticated"
}

Path Parameters

orgSlug · string · required

saSlug · string · required

Body

application/json

clientSecret · string · required

The raw client secret (sas_{orgSlug}_{uuid})

expiresIn · number

Requested token TTL in seconds (default 3600, max SA_TOKEN_MAX_TTL env)

Response

200

application/json

JWT token issued

JWT token issued for a service account

accessToken · string

JWT access token

expiresAt · string<date-time>

Token expiration timestamp

tokenType · string

Example:

"Bearer"

permissions · string[]

Effective permissions from the assigned role

scopes · string[]

Scope restrictions applied to this service account