Skip to main content

Platform administrator key

The platform administrator key authorizes /admin/v1/* operations, including tenant and application provisioning, application credential creation/rotation/revocation, and audit-log access.

It is a platform operations credential, not an integration credential for a customer application.

Obtain the initial key​

The initial platform key is supplied through the server secret BOOTSTRAP_PLATFORM_ADMIN_KEY. There is no public API endpoint for obtaining a platform key without existing authority. Ask the authorized platform operator to carry out provisioning or provide the appropriate application credential.

Use it​

The key must have platform:admin. The Swagger authorization field is platformAdminKey. Ordinary application integrations use applicationApiKey instead.

Keep platform secrets in the operations secret store and use a restricted operator workflow. Tenant teams should use Console permissions for routine configuration.

A Console owner session is separate from this key. Neither Console login nor a user-token request turns an application key into a platform credential.