curl -sS -X POST "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs" \
-H "Authorization: Bearer $PHOSRA_SESSION_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}'const BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1";
const res = await fetch(`${BASE}/developers/orgs`, {
method: "POST",
headers: {
"Authorization": `Bearer ${process.env.PHOSRA_SESSION_TOKEN}`,
"Content-Type": "application/json",
},
body: JSON.stringify({
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}),
});
console.log(res.status, await res.json());
import os, requests
BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1"
res = requests.post(
f"{BASE}/developers/orgs",
headers={"Authorization": f"Bearer {os.environ['PHOSRA_SESSION_TOKEN']}"},
json={
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
},
)
print(res.status_code, res.json())
package main
import (
"bytes"
"fmt"
"io"
"net/http"
"os"
)
func main() {
base := "https://phosra-api-sandbox-production.up.railway.app/api/v1"
body := bytes.NewBufferString(`{
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}`)
req, _ := http.NewRequest("POST", base+"/developers/orgs", body)
req.Header.Set("Authorization", "Bearer "+os.Getenv("PHOSRA_SESSION_TOKEN"))
req.Header.Set("Content-Type", "application/json")
resp, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
out, _ := io.ReadAll(resp.Body)
fmt.Println(resp.Status, string(out))
}
<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => '<string>',
'description' => '<string>',
'website_url' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}HttpResponse<String> response = Unirest.post("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"<string>\",\n \"description\": \"<string>\",\n \"website_url\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"<string>\",\n \"description\": \"<string>\",\n \"website_url\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"id": "a9a85c68-90be-4829-96d3-2038f835db7c",
"name": "Docs DX24 Sample",
"slug": "docs-dx24-sample-807b",
"description": "",
"website_url": "https://example.com",
"logo_url": "",
"owner_user_id": "06c5090f-ea5b-4841-a611-e8c9d67df0c5",
"tier": "free",
"rate_limit_rpm": 100,
"created_at": "2026-07-06T09:26:48.812564861Z",
"updated_at": "2026-07-06T09:26:48.812564861Z"
}{
"error": "Bad Request",
"message": "name is required",
"code": 400
}{
"error": "Unauthorized",
"message": "missing authorization header",
"code": 401
}{
"error": "Conflict",
"message": "organization slug already exists, please try again",
"code": 409
}{
"error": "Too Many Requests",
"message": "rate limit exceeded",
"code": 429
}{
"error": "Internal Server Error",
"message": "internal error",
"code": 500
}Create organization
Creates a developer organization and returns the created resource. The creator becomes the first member with the owner role.
curl -sS -X POST "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs" \
-H "Authorization: Bearer $PHOSRA_SESSION_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}'const BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1";
const res = await fetch(`${BASE}/developers/orgs`, {
method: "POST",
headers: {
"Authorization": `Bearer ${process.env.PHOSRA_SESSION_TOKEN}`,
"Content-Type": "application/json",
},
body: JSON.stringify({
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}),
});
console.log(res.status, await res.json());
import os, requests
BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1"
res = requests.post(
f"{BASE}/developers/orgs",
headers={"Authorization": f"Bearer {os.environ['PHOSRA_SESSION_TOKEN']}"},
json={
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
},
)
print(res.status_code, res.json())
package main
import (
"bytes"
"fmt"
"io"
"net/http"
"os"
)
func main() {
base := "https://phosra-api-sandbox-production.up.railway.app/api/v1"
body := bytes.NewBufferString(`{
"name": "Acme Safety Labs",
"description": "Parental-controls integration for Acme.",
"website_url": "https://acme.example.com"
}`)
req, _ := http.NewRequest("POST", base+"/developers/orgs", body)
req.Header.Set("Authorization", "Bearer "+os.Getenv("PHOSRA_SESSION_TOKEN"))
req.Header.Set("Content-Type", "application/json")
resp, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
out, _ := io.ReadAll(resp.Body)
fmt.Println(resp.Status, string(out))
}
<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => '<string>',
'description' => '<string>',
'website_url' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}HttpResponse<String> response = Unirest.post("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"<string>\",\n \"description\": \"<string>\",\n \"website_url\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://phosra-api-sandbox-production.up.railway.app/api/v1/developers/orgs")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"<string>\",\n \"description\": \"<string>\",\n \"website_url\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"id": "a9a85c68-90be-4829-96d3-2038f835db7c",
"name": "Docs DX24 Sample",
"slug": "docs-dx24-sample-807b",
"description": "",
"website_url": "https://example.com",
"logo_url": "",
"owner_user_id": "06c5090f-ea5b-4841-a611-e8c9d67df0c5",
"tier": "free",
"rate_limit_rpm": 100,
"created_at": "2026-07-06T09:26:48.812564861Z",
"updated_at": "2026-07-06T09:26:48.812564861Z"
}{
"error": "Bad Request",
"message": "name is required",
"code": 400
}{
"error": "Unauthorized",
"message": "missing authorization header",
"code": 401
}{
"error": "Conflict",
"message": "organization slug already exists, please try again",
"code": 409
}{
"error": "Too Many Requests",
"message": "rate limit exceeded",
"code": 429
}{
"error": "Internal Server Error",
"message": "internal error",
"code": 500
}Authorizations
A logged-in user session bearer token (WorkOS AuthKit access token from signup/login).
Body
Response
Organization created. A fresh org always starts on the free tier with a rate_limit_rpm of 100, and its slug is derived from the name with a short random suffix appended for uniqueness. logo_url is empty until you set one, and created_at equals updated_at. (Body captured verbatim from the live sandbox.)
Unique identifier for this resource.
Human-readable display name.
URL-safe stable identifier.
Human-readable description.
URL for website.
URL for logo.
UUID identifier.
Accreditation / integration tier of the organization. New orgs start on free; higher tiers (e.g. accredited) are granted after the OCSS accreditation review.
"free"
Per-minute request-rate limit applied to this organization's keys.
RFC 3339 timestamp of when the resource was created.
RFC 3339 timestamp of the resource's most recent update.