Create application

post

https://staging.ankatech.co/api/v3/admin/tenants/{tenantId}/applications

Creates a new application client for cryptographic operations.

IMPORTANT: Applications can ONLY be created in regular tenants.
The platform tenant (ID: 00000000-0000-0000-0000-000000000001) is reserved
for platform administration and does not support application clients.

Applications receive crypto operation scopes:

key_management.* (key lifecycle operations)
secure.* (encrypt, decrypt, sign, verify, reencrypt, resign)
stream.* (streaming crypto for large files)

The application secret will be securely hashed before storage.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

tenantId

uuid

required

Body Params

Request payload for creating a new APPLICATION business container under the tenant
identified in the JWT token. Applications are business-entity containers; they do
NOT authenticate. Authentication is performed through one or more Cryptographic
Actors that the platform attaches to the Application — a Default Actor is
auto-provisioned in the same transaction as the Application, and additional
non-default Actors can be created later via POST /actors.

Business identity enrichment enables governance, compliance, and incident management.

applicationName

string

required

length between 0 and 255

Unique human-readable name for the application within the tenant.
This name must be unique across all applications in the same tenant.
Used for identification and management purposes.

displayName

string

Human-readable display name for UI and reports

description

string

Purpose and scope description of the application

environment

string

enum

Defaults to PRODUCTION

Environment: PRODUCTION, STAGING, DEVELOPMENT, SANDBOX

Allowed:

businessUnit

string

Organizational unit responsible for this application

costCenter

string

Cost center for chargeback/billing

ownerName

string

Business owner name

ownerEmail

string

Business owner email for critical notifications

technicalContactName

string

Technical contact name for incidents

technicalContactEmail

string

Technical contact email for incident response

dataClassification

string

enum

Defaults to INTERNAL

Data sensitivity level: PUBLIC, INTERNAL, CONFIDENTIAL, RESTRICTED

Allowed:

riskLevel

string

enum

Defaults to MEDIUM

Operational risk level: LOW, MEDIUM, HIGH, CRITICAL

Allowed:

regulatoryScope

array of strings

Applicable regulations

regulatoryScope

201Application created successfully

400Invalid request (validation errors)

403Access denied to tenant

409Application creation blocked in platform tenant or name already exists