Create an agent token

Use this to create additional SATs for an existing agent (e.g., for zero-downtime token rotation). The initial SAT is created automatically by CreateAgent.

Scope: agent:write

Authorization

bearerAuth

AuthorizationBearer <token>

Personal Access Token (PAT) or Service Access Token (SAT). Pass the token in the Authorization header: Bearer admp_...

In: header

Path Parameters

agent_id*agent_id

The agent to bind this token to (UUID).

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

agent_id*agent_id

The agent to bind this token to (UUID).

Formatuuid

name*name

URL-safe, human-readable identifier for the token (e.g., "prod-agent-key"). Unique within the agent's tokens. Lowercase alphanumeric and hyphens only, must start with a letter and end with an alphanumeric character (1-63 chars).

Match^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$

Length1 <= length <= 63

expires_at?expires_at

Optional expiration time. If unset, the token does not expire.

Formatdate-time

Response Body

`application/json`

curl -X POST "https://api.admiral.io/api/v1/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08/tokens" \  -H "Content-Type: application/json" \  -d '{    "agent_id": "2b1e3b65-2c04-4fa2-a2d7-467901e98978",    "name": "string"  }'

{  "access_token": {    "id": "9f8e7d6c-5b4a-3210-fedc-ba0987654321",    "name": "ci-deploy-key",    "token_prefix": "admp_pL2m",    "token_type": "TOKEN_TYPE_PAT",    "scopes": [      "run:write",      "app:read",      "env:read"    ],    "status": "ACCESS_TOKEN_STATUS_ACTIVE",    "binding_type": "BINDING_TYPE_USER",    "binding_id": "d290f1ee-6c54-4b01-90e6-d701748f0851",    "created_by": {      "id": "d290f1ee-6c54-4b01-90e6-d701748f0851",      "display_name": "Alex Chen",      "email": "[email protected]"    },    "expires_at": "2026-06-01T00:00:00Z",    "last_used_at": "2025-11-20T14:30:00Z",    "created_at": "2025-09-01T10:00:00Z"  },  "plain_text_token": "string"}