Impersonation

Partner-only token mint. Returns a Passport personal access token issued AS the account owner so server-to-server callers can drive account-scoped endpoints on behalf of a tenant account. Pattern B: every mint also revokes any previously-active token under the same name (one active token per partner-account pair).

Prerequisites

A bearer token in the Authorization header. Any endpoint that needs no token says so on its own page.
The id of each record the call targets. Every endpoint page lists the ids it needs.

Errors

Status	Meaning
`401`	The bearer token is missing, expired or invalid
`403`	The token is valid but the record sits outside your account
`422`	The request failed validation — the response names the fields
`500`	Unexpected server error

Individual endpoints may return more; each page lists its own.

Endpoints

Mint account-owner token (partner-only, rotate-on-mint)

POST — Mint a Passport personal access token issued AS the owner user of a given account (account-owner impersonation), for server-to-server calls to account-scoped endpoints on behalf of a tenant account.

Open →