{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Create a new Account Owned API token.","properties":{"path":{"type":"object","properties":{"account_id":{"$ref":"#/definitions/iam_account_identifier"}},"required":["account_id"],"additionalProperties":false},"body":{"$ref":"#/definitions/iam_create_payload"}},"required":["path","body"],"additionalProperties":false,"definitions":{"iam_account_identifier":{"description":"Account identifier tag.","allOf":[{"$ref":"#/definitions/iam_common_components-schemas-identifier"}],"title":"Account Identifier"},"iam_create_payload":{"type":"object","properties":{"condition":{"$ref":"#/definitions/iam_condition"},"expires_on":{"$ref":"#/definitions/iam_expires_on"},"name":{"$ref":"#/definitions/iam_name"},"not_before":{"$ref":"#/definitions/iam_not_before"},"policies":{"$ref":"#/definitions/iam_token_policies"}},"required":["name","policies"]},"iam_common_components-schemas-identifier":{"description":"Identifier","type":"string","maxLength":32,"minLength":32,"examples":["023e105f4ecef8ad9ca31a8372d0c353"]},"iam_condition":{"type":"object","properties":{"request_ip":{"$ref":"#/definitions/iam_request_ip"}}},"iam_expires_on":{"description":"The expiration time on or after which the JWT MUST NOT be accepted for processing.","type":"string","format":"date-time","examples":["2020-01-01T00:00:00Z"]},"iam_name":{"description":"Token name.","type":"string","maxLength":120,"examples":["readonly token"]},"iam_not_before":{"description":"The time before which the token MUST NOT be accepted for processing.","type":"string","format":"date-time","examples":["2018-07-01T05:20:00Z"]},"iam_token_policies":{"description":"List of access policies assigned to the token.","type":"array","items":{"$ref":"#/definitions/iam_policy_with_permission_groups_and_resources"}},"iam_request_ip":{"description":"Client IP restrictions.","type":"object","properties":{"in":{"$ref":"#/definitions/iam_cidr_list"},"not_in":{"$ref":"#/definitions/iam_cidr_list"}},"examples":[{"in":["123.123.123.0/24","2606:4700::/32"],"not_in":["123.123.123.100/24","2606:4700:4700::/48"]}]},"iam_policy_with_permission_groups_and_resources":{"type":"object","properties":{"effect":{"$ref":"#/definitions/iam_effect"},"id":{"$ref":"#/definitions/iam_policy_identifier"},"permission_groups":{"$ref":"#/definitions/iam_permission_groups"},"resources":{"$ref":"#/definitions/iam_resources"}},"required":["id","effect","permission_groups","resources"],"title":"Policy with Permission Groups and Resources"},"iam_cidr_list":{"description":"List of IPv4/IPv6 CIDR addresses.","type":"array","items":{"description":"IPv4/IPv6 CIDR.","type":"string","examples":["199.27.128.0/21"]},"examples":[["199.27.128.0/21","2400:cb00::/32"]]},"iam_effect":{"description":"Allow or deny operations against the resources.","type":"string","enum":["allow","deny"],"examples":["allow"]},"iam_policy_identifier":{"description":"Policy identifier.","type":"string","examples":["f267e341f3dd4697bd3b9f71dd96247f"]},"iam_permission_groups":{"description":"A set of permission groups that are specified to the policy.","type":"array","items":{"$ref":"#/definitions/iam_permission_group"},"examples":[[{"id":"c8fed203ed3043cba015a93ad1616f1f","meta":{"label":"load_balancer_admin","scopes":"com.cloudflare.api.account"},"name":"Zone Read"},{"id":"82e64a83756745bbbb1c9c2701bf816b","meta":{"label":"fbm_user","scopes":"com.cloudflare.api.account"},"name":"Magic Network Monitoring"}]]},"iam_resources":{"description":"A list of resource names that the policy applies to.","oneOf":[{"$ref":"#/definitions/iam_resources_type_object_string"},{"$ref":"#/definitions/iam_resources_type_object_nested"}],"examples":[{"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43":"*"}]},"iam_permission_group":{"description":"A named group of permissions that map to a group of operations against resources.","type":"object","properties":{"id":{"description":"Identifier of the permission group.","type":"string","examples":["6d7f2f5f5b1d4a0e9081fdc98d432fd1"]},"meta":{"description":"Attributes associated to the permission group.","type":"object","properties":{"category":{"description":"A category used to group permission groups.","type":"string"},"deprecated":{"description":"Indicates whether the permission group is deprecated.","type":"string"},"description":{"description":"Additional information about the permission group.","type":"string"},"editable":{"description":"Indicates whether the permission group can be edited.","type":"string"},"eol_at":{"description":"The planned end-of-life date and time, when provided.","type":"string","format":"date-time"},"label":{"description":"A label identifying the permission group.","type":"string"},"scopes":{"description":"The scope associated with the permission group.","type":"string"},"visibility":{"description":"Indicates the permission group's availability or visibility.","type":"string"}},"examples":[{"label":"load_balancer_admin","scopes":"com.cloudflare.api.account"}]}},"required":["id"]},"iam_resources_type_object_string":{"description":"Map of simple string resource permissions","type":"object","additionalProperties":{"description":"Simple permission string like \"*\"","type":"string"}},"iam_resources_type_object_nested":{"description":"Map of nested resource permissions","type":"object","additionalProperties":{"additionalProperties":{"type":"string"},"description":"Nested permission object","type":"object"}}}},"name":"Create Token","id":"cloudflare.account-api-tokens-create-token","example":{"path":{"account_id":"023e105f4ecef8ad9ca31a8372d0c353"},"body":{"name":"readonly token","policies":[]}},"maxRequests":1,"summary":false}}