Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

JWT Bearer token obtained from authentication. Pass as: Authorization: Bearer

Body

application/json

Step-up parameters

otp_code
string

The 6-digit code emailed to the owner by /agent/elevate/request

Minimum string length: 1
grant
string

An owner grant from a previous enrolment, used instead of an emailed code. The caller is expected to have kept it behind a local human-presence gate.

Minimum string length: 1
enroll
boolean

Also return a durable owner grant, so later step-ups on this machine need no email. Honoured only when authorising with otp_code — a grant cannot mint its successor.

Response

200 - application/json

OK

Short-lived master credential

api_key
string
required

Short-lived key with master capability. Shown once; store it now.

expires_at
string<date-time>
required

When the key stops working

api_key_id
string
required

Id of the issued key, for revoking it early

grant
string

Durable owner grant. Shown once; store it behind a human-presence gate.

grant_expires_at
string<date-time>

When the grant stops being accepted and an emailed code is needed again