Create service token

curl --request POST \
  --url https://api.braintrust.dev/v1/service_token \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "service_account_id": "<string>",
  "org_name": "<string>",
  "expires_in_seconds": 123
}
'

import requests

url = "https://api.braintrust.dev/v1/service_token"

payload = {
    "name": "<string>",
    "service_account_id": "<string>",
    "org_name": "<string>",
    "expires_in_seconds": 123
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    service_account_id: '<string>',
    org_name: '<string>',
    expires_in_seconds: 123
  })
};

fetch('https://api.braintrust.dev/v1/service_token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.braintrust.dev/v1/service_token",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'service_account_id' => '<string>',
    'org_name' => '<string>',
    'expires_in_seconds' => 123
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.braintrust.dev/v1/service_token"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.braintrust.dev/v1/service_token")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.braintrust.dev/v1/service_token")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}"

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "preview_name": "<string>",
  "key": "<string>",
  "created": "2023-11-07T05:31:56Z",
  "service_account_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "service_account_email": "<string>",
  "service_account_name": "<string>",
  "org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "expires_at": "2023-11-07T05:31:56Z"
}

<string>

<string>

<string>

<string>

<string>

ServiceTokens

Create service token

Create a new service token.

Authenticate with a service token. A service token whose service account is an organization owner can create tokens for any service account. A service token whose service account holds the Owner role on a project group can create tokens for a service account in the same organization when the target account has a permission grant on a project group it owns. The calling service account must also hold all of the target account’s permissions in the organization; otherwise the request returns 403. User API keys cannot be used.

POST

service_token

curl --request POST \
  --url https://api.braintrust.dev/v1/service_token \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "service_account_id": "<string>",
  "org_name": "<string>",
  "expires_in_seconds": 123
}
'

import requests

url = "https://api.braintrust.dev/v1/service_token"

payload = {
    "name": "<string>",
    "service_account_id": "<string>",
    "org_name": "<string>",
    "expires_in_seconds": 123
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    service_account_id: '<string>',
    org_name: '<string>',
    expires_in_seconds: 123
  })
};

fetch('https://api.braintrust.dev/v1/service_token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.braintrust.dev/v1/service_token",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'service_account_id' => '<string>',
    'org_name' => '<string>',
    'expires_in_seconds' => 123
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.braintrust.dev/v1/service_token"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.braintrust.dev/v1/service_token")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.braintrust.dev/v1/service_token")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"service_account_id\": \"<string>\",\n  \"org_name\": \"<string>\",\n  \"expires_in_seconds\": 123\n}"

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "preview_name": "<string>",
  "key": "<string>",
  "created": "2023-11-07T05:31:56Z",
  "service_account_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "service_account_email": "<string>",
  "service_account_name": "<string>",
  "org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "expires_at": "2023-11-07T05:31:56Z"
}

<string>

<string>

<string>

<string>

<string>

Authorizations

Authorization

string

header

required

Most Braintrust endpoints are authenticated by providing your API key as a header Authorization: Bearer [api_key] to your HTTP request. You can create an API key in the Braintrust organization settings page.

Body

application/json

Any desired information about the new service token object

name

string

required

Name of the service token. Does not have to be unique

service_account_id

string

required

The ID of the service account to which the token should belong. To create a service account, visit Settings > Service tokens in the Braintrust UI or call PATCH /v1/organization/members.

org_name

string | null

For nearly all users, this parameter should be unnecessary. But in the rare case that your API key belongs to multiple organizations, you may specify the name of the organization the Service token belongs in.

expires_in_seconds

integer | null

Number of seconds from now after which the service token should expire. If omitted, the token never expires.

Response

Returns an object containing the raw service token. This is the only time the raw API key will be exposed

string<uuid>

required

Unique identifier for the service token

name

string

required

Name of the service token

preview_name

string

required

key

string

required

The raw service token. It will only be exposed this one time

created

string<date-time> | null

Date of service token creation

service_account_id

string<uuid> | null

Unique identifier for the service token

service_account_email

string | null

The service account email (not routable)

service_account_name

string | null

The service account name

org_id

string<uuid> | null

Unique identifier for the organization

expires_at

string<date-time> | null

Date and time at which the service token expires. If null, the token never expires.

API

CLI

Terraform

SQL

Create service token

Authorizations

Body

Response