> ## Documentation Index
> Fetch the complete documentation index at: https://docs.photon.codes/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use Stable documentation by default. Honor an explicit Beta request or a URL under /docs/beta/. If the requested version conflicts with the installed CLI package or API origin, clarify the target before writing integration code.
> Pages under /docs/beta/ document Beta; other product pages document Stable. Keep the CLI package, commands, API origin, and credentials within the selected version. State the documentation version in your answer.
> For MCP search, always pass version: Stable or version: Beta. Unfiltered search mixes both versions. For filesystem reads, keep Beta queries under /beta/ and exclude /beta/ from Stable queries; discover paths before reading them.
> The public docs base is https://photon.codes/docs. Convert MCP page paths to public URLs under that base, preserving /beta/ when present. Read https://photon.codes/docs/skill.md for version selection and https://photon.codes/docs/llms.txt for the version indexes.

# Create a one-time Service Identity M2M client secret

> Create a one-time Service Identity M2M client secret: createServiceIdentityClientSecret in the TypeScript, Python, Rust and Go clients.

`POST /v1/organizations/{organizationId}/service-identities/{serviceIdentityId}/credentials/client-secrets`

**TypeScript**

```typescript TypeScript theme={null}
photon.organizations.createServiceIdentityClientSecret(input: CreateServiceIdentityClientSecretInput, options?: RequestOptions): Promise<CreateServiceIdentityClientSecretOutput>
```

**Python**

```python Python theme={null}
photon.organizations.create_service_identity_client_secret(input: CreateServiceIdentityClientSecretInput) -> models.CreateServiceIdentityClientSecretResponse
```

**Rust**

```rust Rust theme={null}
client.create_service_identity_client_secret(idempotency_key: String, organization_id: String, service_identity_id: String, body: &types::CreateServiceIdentityClientSecretRequest).await -> Result<ResponseValue<types::CreateServiceIdentityClientSecretResponse>, Error<CreateServiceIdentityClientSecretError>>
```

**Go**

```go Go theme={null}
client.Organizations.CreateServiceIdentityClientSecret(ctx context.Context, params *CreateServiceIdentityClientSecretParams, opts ...RequestOption) (*CreateServiceIdentityClientSecretResponse, error)
```

```typescript TypeScript theme={null}
import { Photon } from "@photon-ai/api";

const photon = new Photon({
  headers: { Authorization: `Bearer ${process.env.PHOTON_API_TOKEN}` },
});
const result = await photon.organizations.createServiceIdentityClientSecret({
  path: {
    organizationId: "organizationId",
    serviceIdentityId: "serviceIdentityId",
  },
  headers: {
    idempotencyKey: "idempotencyKey",
  },
  body: {
    expectedIdentityVersion: "expectedIdentityVersion",
    label: "label",
  },
});
```

```python Python theme={null}
import os

from photon_api import Photon
from photon_api.rpc_generated import CreateServiceIdentityClientSecretInput

photon = Photon(headers={"Authorization": f"Bearer {os.environ['PHOTON_API_TOKEN']}"})
result = photon.organizations.create_service_identity_client_secret(
    CreateServiceIdentityClientSecretInput.model_validate({
        "path": {
            "organizationId": "organizationId",
            "serviceIdentityId": "serviceIdentityId",
        },
        "headers": {
            "Idempotency-Key": "idempotencyKey",
        },
        "body": {
            "expectedIdentityVersion": "expectedIdentityVersion",
            "label": "label",
        },
    })
)
```

```rust Rust theme={null}
use photon_ai_api::{Credential, PhotonClientBuilder, SecretString};

let token = std::env::var("PHOTON_API_TOKEN")?;
let client = PhotonClientBuilder::new()
    .credential("accountServiceKey", Credential::Bearer(SecretString::from(token)))
    .build()?;
let result = client
    .create_service_identity_client_secret(
        "idempotencyKey".to_owned(),
        "organizationId".to_owned(),
        "serviceIdentityId".to_owned(),
        &serde_json::from_value(serde_json::json!({
            "expectedIdentityVersion": "expectedIdentityVersion",
            "label": "label",
        }))?,
    )
    .await
    .map_err(|error| format!("{error:?}"))?
    .into_inner();
```

```go Go theme={null}
import (
	"context"
	"encoding/json"
	"os"

	photonapi "github.com/photon-hq/api/packages/go"
)

ctx := context.Background()
client := photonapi.NewClient(photonapi.WithAPIKey(os.Getenv("PHOTON_API_TOKEN")))
var body photonapi.CreateServiceIdentityClientSecretRequest
if err := json.Unmarshal([]byte(`{
	"expectedIdentityVersion": "expectedIdentityVersion",
	"label": "label"
}`), &body); err != nil {
	return err
}
result, err := client.Organizations.CreateServiceIdentityClientSecret(ctx, &photonapi.CreateServiceIdentityClientSecretParams{
	IdempotencyKey: "idempotencyKey",
	OrganizationID: "organizationId",
	ServiceIdentityID: "serviceIdentityId",
	Body: body,
})
if err != nil {
	return err
}
_ = result
```

```json 200 theme={null}
{
  "clientId": "string",
  "credentialId": "string",
  "stage": "credential",
  "status": "created",
  "value": "string"
}
```

## Parameters

**Idempotency-Key** `string` *required*

Identifies one logical mutation across retries.

**organizationId** `string` *required*

**serviceIdentityId** `string` *required*

## Body

**expectedIdentityVersion** `string` *required*

**label** `string` *required*

## Returns

**`200`** Creation stage and state; only first delivery includes value and clientId. CreateServiceIdentityClientSecretResponse

**One of: CreateServiceIdentityClientSecretResponseCreated**

**clientId** `string` *required*

**credentialId** `string` *required*

**stage** `"credential"` *required*

**status** `"created"` *required*

**value** `string` *required*

**One of: CreateServiceIdentityClientSecretResponseUndelivered**

**credentialId** `string` *required*

**stage** `"credential"` *required*

**status** `CreateServiceIdentityClientSecretResponseUndeliveredStatus` *required*

**One of: CreateServiceIdentityClientSecretResponseApplicationPending**

**operationId** `string (uuid)` *required*

**stage** `"application"` *required*

**status** `CreateServiceIdentityClientSecretResponseApplicationPendingStatus` *required*


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.