> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domino.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Create service account token



## OpenAPI

````yaml /api-specs/6.3/public-api.json post /api/serviceAccounts/v1/serviceAccounts/{serviceAccountIdpId}/tokens
openapi: 3.0.3
info:
  title: Domino Public API
  description: Reference for Domino's public REST API endpoints.
  version: 6.3.1
  x-catalog-key: nucleus
servers:
  - url: https://mycluster.domino.tech
    description: >-
      Replace 'mycluster.domino.tech' with your Domino cluster hostname. For
      Domino Cloud customers, that is `your-subdomain`.domino.tech (e.g.,
      acme.domino.tech). For self-hosted deployments, it is the hostname you
      reach the Domino UI at.
security: []
tags:
  - name: Projects
  - name: Project templates
  - name: Workspaces
  - name: Jobs
  - name: HPC Jobs
  - name: Environments
  - name: Hardware Tiers
  - name: Datasets
  - name: Data Sources
  - name: AI Gateway
  - name: GenAI
  - name: AI Systems
  - name: Apps
  - name: App versions
  - name: App instances
  - name: Model APIs
  - name: Registered models
  - name: Model deployment
  - name: Extensions
  - name: Cost and billing
  - name: Users and organizations
  - name: Service accounts
  - name: Personal Access Tokens
  - name: Personal Access Tokens (admin)
  - name: Audit Trail
  - name: Custom metrics
  - name: PPM
  - name: Model Monitoring models
  - name: Model Monitoring drift and quality
  - name: Model Monitoring settings
  - name: Model Monitoring authentication
  - name: Governance bundles
  - name: Governance policies
  - name: Governance evidence and results
  - name: Governance operations
  - name: NetApp Volumes
  - name: NetApp Volumes snapshots
  - name: NetApp Volumes filesystems
  - name: NetApp Volumes transfers
  - name: Tags
  - name: Properties
externalDocs:
  description: OpenAPI
  url: https://swagger.io/resources/open-api/
paths:
  /api/serviceAccounts/v1/serviceAccounts/{serviceAccountIdpId}/tokens:
    post:
      tags:
        - Service accounts
      operationId: createServiceAccountToken
      parameters:
        - $ref: '#/components/parameters/serviceAccountIdpId'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateToken'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountToken'
          description: Creates a service account token
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
      security:
        - DominoApiKey: []
        - BearerAuthentication: []
components:
  parameters:
    serviceAccountIdpId:
      in: path
      name: serviceAccountIdpId
      required: true
      schema:
        type: string
  schemas:
    CreateToken:
      type: object
      required:
        - name
      properties:
        name:
          type: string
    ServiceAccountToken:
      allOf:
        - $ref: '#/components/schemas/ServiceAccountTokenDetails'
        - properties:
            token:
              type: string
          required:
            - name
            - serviceAccountIdpId
            - isValid
            - createdAt
            - token
          type: object
    ServiceAccountTokenDetails:
      properties:
        createdAt:
          example: '2025-08-21T23:51:54.075Z'
          format: date-time
          type: string
        expiresAt:
          example: '2025-08-21T23:51:54.075Z'
          format: date-time
          type: string
        isValid:
          type: boolean
        name:
          type: string
        serviceAccountIdpId:
          type: string
      required:
        - name
        - serviceAccountIdpId
        - isValid
        - createdAt
      type: object
    ErrorV1:
      properties:
        code:
          description: Machine-readable error code.
          example: NOT_FOUND
          type: string
        message:
          description: Human-readable description of the error.
          example: The requested HPC Job could not be found.
          type: string
      required:
        - message
      type: object
  responses:
    '400':
      content:
        application/json:
          schema:
            properties:
              error:
                type: string
            type: object
      description: Bad Request
    '401':
      content:
        application/json:
          example:
            code: UNAUTHORIZED
            message: Authentication is required to access this resource.
          schema:
            $ref: '#/components/schemas/ErrorV1'
      description: Unauthorized - authentication is required or has failed.
    '403':
      content:
        application/json:
          example:
            code: FORBIDDEN
            message: You do not have permission to perform this action.
          schema:
            $ref: '#/components/schemas/ErrorV1'
      description: Forbidden - the caller lacks permission to perform this action.
    '404':
      content:
        application/json:
          schema:
            properties:
              error:
                type: string
            type: object
      description: Not Found
  securitySchemes:
    DominoApiKey:
      type: apiKey
      in: header
      name: X-Domino-Api-Key
    BearerAuthentication:
      type: apiKey
      name: Authorization
      in: header

````

## Related topics

- [Service accounts](/6.3/admin/identity-and-access/manage-users/service-accounts.md)
- [Get service account token](/6.3/api-reference/service-accounts/get-apiserviceaccountsv1serviceaccounts-tokens-1.md)
- [Delete service account token](/6.3/api-reference/service-accounts/delete-apiserviceaccountsv1serviceaccounts-tokens.md)
- [List service account tokens](/6.3/api-reference/service-accounts/get-apiserviceaccountsv1serviceaccounts-tokens.md)