---
title: "CreateAgentCredential"
description: "Create an agent credential"
canonical: "https://pgbeam.com/docs/go-sdk/agents/createAgentCredential"
last-updated: "2026-10-29T19:01:20.000Z"
---

# CreateAgentCredential

> Create an agent credential

URL: https://pgbeam.com/docs/go-sdk/agents/createAgentCredential

{/* Auto-generated from OpenAPI. Do not edit. Run `pnpm generate:sdk-docs` to regenerate. */}

Issues a scoped Postgres login and hosted MCP token for an AI agent. The connection string and MCP token are returned once and cannot be retrieved again.

## Usage

```go
result, err := client.Agents.CreateAgentCredential(ctx, "prj_xxx", pgbeam.CreateAgentCredentialRequest{
    Name: "...",
    PolicyProfileId: "...",
  })
```

## Parameters

| Parameter            | Type                                                | Required | Description                                                                                                                                            |
| -------------------- | --------------------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| ctx                  | `context.Context`                                   | Yes      | Request context                                                                                                                                        |
| projectID            | `string`                                            | Yes      | Unique project identifier (prefixed, e.g. prj_xxx).                                                                                                    |
| body                 | `pgbeam.CreateAgentCredentialRequest`               | Yes      | Request body                                                                                                                                           |
| body.Name            | `string`                                            | Yes      | Human-readable label for the credential.                                                                                                               |
| body.PolicyProfileId | `string`                                            | Yes      | The policy profile to enforce for this credential.                                                                                                     |
| body.PrincipalType   | `*pgbeam.CreateAgentCredentialRequestPrincipalType` | No       | Whether this credential represents an autonomous agent or a human operator.                                                                            |
| body.ExpiresAt       | `*time.Time`                                        | No       | Optional expiry. When set, the credential becomes unusable at this time (must be in the future). Omit or set null for a credential that never expires. |

## Response

`(*pgbeam.AgentCredentialSecrets, error)`: agent credential created. secrets shown once.

## Example

```go
import pgbeam "go.pgbeam.com/sdk"

client := pgbeam.NewClient(&pgbeam.ClientOptions{
  APIKey: "pbu_...",
})

principalType := pgbeam.CreateAgentCredentialRequestPrincipalType("agent")
result, err := client.Agents.CreateAgentCredential(ctx, "prj_xxx", pgbeam.CreateAgentCredentialRequest{
    Name: "...",
    PolicyProfileId: "...",
    PrincipalType: &principalType,
  })
if err != nil {
  log.Fatal(err)
}
fmt.Println(result)
```

## Errors

| Status | Description                                                                                                                                                                                                                                                                                                                           |
| ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 400    | The request was rejected. `code` is `INVALID_INPUT`, and `errors` names the offending fields when the failure was a validation one.                                                                                                                                                                                                   |
| 401    | Missing or invalid authentication. `code` is `UNAUTHORIZED`.                                                                                                                                                                                                                                                                          |
| 403    | Agent credential quota reached for the organization plan.                                                                                                                                                                                                                                                                             |
| 404    | The resource does not exist, or the caller is not entitled to know that it does. `code` is `NOT_FOUND`.                                                                                                                                                                                                                               |
| 409    | The request conflicts with the current state. `code` distinguishes the cases: `RESOURCE_EXISTS` for a name or value already in use, `INVALID_STATE` for a resource that is no longer in a state that allows the operation, and `IDEMPOTENCY_KEY_REUSED` for a retry whose body does not match the request the key was first used for. |
| 413    | The request body exceeds the 2 MB limit. `code` is `PAYLOAD_TOO_LARGE`.                                                                                                                                                                                                                                                               |
| 415    | The request body is not JSON, or carries a body without declaring a Content-Type. `code` is `UNSUPPORTED_MEDIA_TYPE`.                                                                                                                                                                                                                 |
| 429    | Rate limited. `code` is `RATE_LIMITED`.                                                                                                                                                                                                                                                                                               |
| 500    | The request failed for a reason on our side. `code` is `INTERNAL_ERROR`. Quote `request_id` when reporting it.                                                                                                                                                                                                                        |