Mint tenant API tokens

POST

api

partner

accounts

{id}

tokens

Error

A valid request URL is required to generate request examples

{
  "account": {
    "id": 412,
    "external_id": "firm-8675309"
  },
  "admin": {
    "id": 991,
    "email": "admin@acme.example"
  },
  "api_token": "2ff154a0405e..."
}

This endpoint mints a tenant API token for the account’s provisioned partner admin. If that user is missing or archived, the oldest active admin is used. The insert and audit event are atomic.

curl -X POST https://spitshake.io/api/partner/v1/accounts/412/tokens \
  -H "Authorization: Bearer $SPITSHAKE_PARTNER_KEY" \
  -H "Idempotency-Key: token-rotation-2026-07-22" \
  -H "Content-Type: application/json" \
  -d '{}'

201

{
  "account": {
    "id": 412,
    "external_id": "firm-8675309"
  },
  "admin": {
    "id": 991,
    "email": "admin@acme.example"
  },
  "api_token": "2ff154a0405e..."
}

The raw token is shown only in the first response and exact idempotent replays. Store it securely. The token authenticates the ordinary tenant API, not the Partner API.

Status	Meaning
`401`	Missing or invalid partner key.
`403`	Partner access is suspended.
`404`	Account is not owned by this partner.
`409`	Another request with this endpoint/key is still in flight.
`422`	No active admin exists, or the idempotency key was reused with a different body.

Authorizations

Authorization

string

header

required

Operator-issued partner key. Accepted only under /api/partner/v1.

Headers

Idempotency-Key

string

Maximum string length: 255

Path Parameters

integer

required

Body

application/json

The body is of type object.

Response

Tenant API token minted and audited

account

object

required

Show child attributes

admin

object

required

Show child attributes

api_token

string

required

Tenant API token returned only once and on exact idempotent replay.

Error

A valid request URL is required to generate request examples

{
  "account": {
    "id": 412,
    "external_id": "firm-8675309"
  },
  "admin": {
    "id": 991,
    "email": "admin@acme.example"
  },
  "api_token": "2ff154a0405e..."
}

Overview

Partner API

Templates

Thumbnails

Submissions

Submitters

Users

Access Tokens

Webhooks

Settings

Custom Domains

Teams

Audit Events

MFA

BAA

Security Events

Subscriptions

Plans

Payments

Verification

KBA

AI

Embed

Health

Mint tenant API tokens

Authorizations

Headers

Path Parameters

Body

Response