Create a domain test user
Creates a test account the agent can log in as. Secrets are encrypted at rest and never returned. Email-based MFA requires a Strix-managed inbox (see provision-inbox).
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
Domain id.
Body
Display label for the test user.
Login username/email.
Stored encrypted. Never returned.
Free-text hints for the agent, for example which role the account has.
URL of the login page where the agent signs in with this account.
Second factor the account uses. none for password only.
none, totp, email_otp, magic_link Required when mfa_method=totp. Stored encrypted.
Required for email_otp/magic_link. Must be a Strix-managed inbox in the caller's org pod (see provision-inbox).
Domain ids this test user applies to. Empty array = every domain in the organization (requires unrestricted access). Defaults to the route's domain.
Response
Test user created.
A domain test account. Secrets are never returned — only boolean presence flags.
none, totp, email_otp, magic_link Domain ids this test user applies to. An empty array means it applies to every domain in the organization.