principal_is_not_the_caller

curl https://api.opentype.dev/v1/keys \
  -H "Authorization: Bearer $OPENTYPE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "ticket-triage-worker",
    "scopes": ["runs_write", "runs_read"],
    "principal": {"type": "service_account", "id": "ticket-triage-worker"}
  }'

const res = await fetch("https://api.opentype.dev/v1/keys", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OPENTYPE_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "ticket-triage-worker",
    scopes: ["runs_write", "runs_read"],
    principal: { type: "service_account", id: "ticket-triage-worker" },
  }),
});

const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
// Store body.secret now; it is shown only once.
console.log(body.id, body.principal);

import os
import requests

resp = requests.post(
    "https://api.opentype.dev/v1/keys",
    headers={"Authorization": f"Bearer {os.environ['OPENTYPE_API_KEY']}", "Content-Type": "application/json"},
    json={
        "name": "ticket-triage-worker",
        "scopes": ["runs_write", "runs_read"],
        "principal": {"type": "service_account", "id": "ticket-triage-worker"},
    },
    timeout=30,
)

body = resp.json()
if not resp.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
# Store body["secret"] now; it is shown only once.
print(body["id"], body["principal"])