Create a storage credential

POST

/storage/credentials

Stores a BYO storage credential (Google service account or Azure app). The secret is stored but never returned; the response is redacted. Validates the secret shape per kind (422 on bad shape). Requires organization:manage.

Authentication

AuthorizationBearer

WorkOS session JWT or an organization API key, sent as Authorization: Bearer <token>.

Request

This endpoint expects an object.

kindenumRequired

Allowed values:

labelstringRequired1-120 characters

credentialanyRequired

Response

The created credential (secret redacted).

credentialobject

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

422

Unprocessable Entity Error

1	curl -X POST https:/https://api/storage/credentials \
2	-H "Authorization: Bearer <token>" \
3	-H "Content-Type: application/json" \
4	-d '{
5	"kind": "google-service-account",
6	"label": "Marketing Team GCP Storage"
7	}'

1	{
2	"credential": {
3	"_id": "cred_9f8b7c6d5e4a3b2c1d0e",
4	"kind": "google-service-account",
5	"label": "Marketing Team GCP Storage",
6	"createdAt": "2024-06-10T09:15:00Z",
7	"createdBy": "user_12345"
8	}
9	}