Create a platform user token
Mints a fam_... API key for this customer without needing their password — useful for a dashboard, an onboarding email, or an automated workflow acting on their behalf. The key is returned in full exactly once; store it immediately, it cannot be retrieved again. scopes defaults to full access for the target customer (this key belongs to a different principal than your own credential, so it is not limited to your own credential’s scopes). The key follows the platform’s live-membership rule: if the customer ever leaves this workspace, the key stops working automatically. Required scope: platform:write. Requires white-label platform access (a reseller workspace with the white-label entitlement, or a platform admin acting from a root workspace) plus a live owner/admin membership in the calling credential’s own workspace — see White Label API.
Authorizations
API key (fam_..., created under Settings → API Keys) or an OAuth 2.0 access token (fam_at_...). Keys can be restricted to scopes such as assistants:read, calls:write, campaigns:write, automations:read, dashboards:read, dashboards:write, leads:write, segments:write, phone_numbers:write, sip_trunks:write, knowledge:write, voices:read, billing:read, settings:write, platform:read, platform:write; a *:write scope implies the matching *:read. Automation and dashboard endpoints also accept the legacy calls:* scope. Keys without scope restrictions have full access.
Path Parameters
Body
100Subset of the canonical API scopes to grant this token. Omitted or empty = full access for this customer — this is a completely different principal than your own operator credential, so it is NOT limited to your own credential's scopes.
Omitted = the token never expires.
1 <= x <= 365Pick a specific workspace when the customer has several in your scope; defaults to the one they own.
Response
The minted token (shown once).