> ## Documentation Index > Fetch the complete documentation index at: https://docs.firedrill.run/llms.txt > Use this file to discover all available pages before exploring further. # Create a developer or service credential with one-time secret reveal ## OpenAPI ````yaml /api-reference/openapi.json post /v1/credentials openapi: 3.1.0 info: title: Firedrill Control API version: 1.0.0 description: >- The control plane for drills, drill runs, and the worlds they run in. Errors always carry the canonical envelope; unsafe operations require an Idempotency-Key; long work returns an operation resource. servers: - url: https://api.firedrill.run security: - controlCredential: [] tags: - name: authentication description: Sessions, CLI exchange, credentials, and verification keys. x-group: Authentication - name: organizations description: Organization members, billing, usage, retention, audit, and exports. x-group: Organizations - name: projects description: Project lifecycle, access, grants, and repository bindings. x-group: Projects - name: builds description: Immutable builds, uploads, source drafts, and world definitions. x-group: Builds and source - name: tools description: Project Tool discovery, approval, source, and revocation. x-group: Tool library - name: worlds description: >- Managed environments, world sessions, state, time, reset, faults, forks, and snapshots. x-group: Environments and sessions - name: runs description: >- Hosted runs, comparisons, attachments, reports, evidence bundles, sharing, and exports. x-group: Runs and evidence - name: browser description: Managed browser tests, runs, messages, streams, frames, and artifacts. x-group: Browser testing - name: callbacks description: Callback receiver approval, revocation, and signing material. x-group: Callbacks - name: github-ci description: >- GitHub installations, repository automation, CI suites, cases, evidence, and checks. x-group: GitHub and CI - name: authoring description: Authoring sessions, proposals, turns, and scenario proposals. x-group: Cloud authoring paths: /v1/credentials: post: tags: - authentication summary: Create a developer or service credential with one-time secret reveal operationId: credentials.create parameters: - name: Idempotency-Key in: header required: true schema: type: string minLength: 8 maxLength: 128 pattern: ^[A-Za-z0-9._:-]+$ requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CreateCredentialRequest' responses: '200': description: Idempotently replayed credential issue content: application/json: schema: $ref: '#/components/schemas/CredentialIssue' '201': description: Created credential and one-time secret content: application/json: schema: $ref: '#/components/schemas/CredentialIssue' default: description: Canonical error envelope content: application/json: schema: $ref: '#/components/schemas/ErrorEnvelope' components: schemas: CreateCredentialRequest: type: object properties: kind: type: string enum: - developer - service name: type: string minLength: 1 maxLength: 100 pattern: ^[^\r\n\t]+$ projectId: type: string pattern: ^prj_[0-9a-z]{12,32}$ actions: minItems: 1 maxItems: 128 type: array items: type: string enum: - profile.read - profile.manage - organization.read - organization.manage - organization.billing.read - organization.billing.manage - organization.audit.read - organization.evidence.export - organization.members.manage - project.create - project.read - project.manage - project.members.manage - repository.read - repository.connect - repository.sync - build.read - build.publish - environment.read - environment.create - environment.promote - environment.archive - session.read - session.create - session.control - session.destroy - drill.read - drill.run - run.read - run.cancel - run.compare - evidence.read - evidence.delete - evidence.share - evidence.export - evidence.upload - credential.manage - tool.read - tool.publish - authoring.read - authoring.run - authoring.publish - ci.execute expiresAtMs: type: integer minimum: -9007199254740991 maximum: 9007199254740991 required: - kind - name - actions - expiresAtMs additionalProperties: false CredentialIssue: type: object properties: credential: type: object properties: schemaVersion: type: number enum: - 1 credentialId: type: string pattern: ^cred_[0-9a-z]{12,32}$ organizationId: type: string pattern: ^org_[0-9a-z]{12,32}$ projectId: type: string pattern: ^prj_[0-9a-z]{12,32}$ kind: type: string enum: - browser - device - developer - service - github_oidc subjectId: type: string minLength: 1 maxLength: 255 name: type: string minLength: 1 maxLength: 100 pattern: ^[^\r\n\t]+$ actions: minItems: 1 type: array items: type: string enum: - profile.read - profile.manage - organization.read - organization.manage - organization.billing.read - organization.billing.manage - organization.audit.read - organization.evidence.export - organization.members.manage - project.create - project.read - project.manage - project.members.manage - repository.read - repository.connect - repository.sync - build.read - build.publish - environment.read - environment.create - environment.promote - environment.archive - session.read - session.create - session.control - session.destroy - drill.read - drill.run - run.read - run.cancel - run.compare - evidence.read - evidence.delete - evidence.share - evidence.export - evidence.upload - credential.manage - tool.read - tool.publish - authoring.read - authoring.run - authoring.publish - ci.execute keyPrefix: type: string minLength: 8 maxLength: 32 expiresAtMs: type: integer minimum: -9007199254740991 maximum: 9007199254740991 revokedAtMs: type: integer minimum: -9007199254740991 maximum: 9007199254740991 lastUsedAtMs: type: integer minimum: -9007199254740991 maximum: 9007199254740991 createdAtMs: type: integer minimum: -9007199254740991 maximum: 9007199254740991 required: - schemaVersion - credentialId - organizationId - kind - subjectId - name - actions - keyPrefix - expiresAtMs - createdAtMs additionalProperties: false secret: type: string pattern: ^fd_(?:dev|svc)_[A-Za-z0-9_-]{32,}$ required: - credential - secret additionalProperties: false ErrorEnvelope: type: object properties: code: type: string pattern: ^(control|world)\.[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$ message: type: string minLength: 1 correlationId: type: string minLength: 1 retryable: type: boolean retryAfterMs: type: integer exclusiveMinimum: 0 maximum: 9007199254740991 operationId: type: string source: type: string enum: - platform - simulated_provider issues: type: array items: type: object properties: path: type: string code: type: string message: type: string required: - path - code - message additionalProperties: false details: type: object propertyNames: type: string additionalProperties: {} evidence: type: object properties: sessionId: type: string runId: type: string journalSeq: type: integer minimum: 0 maximum: 9007199254740991 buildHash: type: string additionalProperties: false required: - code - message - correlationId - retryable - source additionalProperties: true securitySchemes: controlCredential: type: http scheme: bearer description: Opaque control credential ````