createPost
ACR DashboardRuns the canonical account product command. Requires a_to_z.manage; active credential scope, current issuing membership, surface grant and account eligibility are rechecked. Existing product safety, business rules, idempotency and limits remain authoritative. Uploaded Posts also require the Account’s current separate public-display upload acknowledgment through the normal Kallfi upload flow. Missing acknowledgment returns HTTP409 creator_upload_consent_required. API credentials never accept consent automatically; preserve normal age, identity, rights, safety and ownership gates.
Authorization
bearerAuth Organization-scoped bearer credential. Credentials are scoped, revocable, and never represented by a Soul or operation ID.
In: header
Header Parameters
Canonical product action UUID. Reuse for retries of the same action. Pricing and generation launch use distinct action UUIDs.
uuidUntrusted explicit workspace UUID. Omitted selects Personal. Workspace commands require current membership, role, surface and grant; explicit denied selection never falls back. Account-owned commands reject a nonpersonal selected workspace. One Account surface key spans currently authorized workspaces; selecting a workspace never issues another key.
uuidRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Canonical /api/post payload. Use the upload intent and finalize protocol first; arbitrary URL ownership is never accepted. Caption safety, upload ownership/consent, participant cardinality, rate limits and gated-media rules execute in the canonical owner.
Response Body
application/json
curl -X POST "https://acr.kallfi.red/v1/posts" \ -H "Idempotency-Key: 497f6eca-6276-4993-bfeb-53cbbbba6f08" \ -H "Content-Type: application/json" \ -d '{ "caption": "string", "mediaType": "image" }'{}