Bootstrap Activation
A one-shot endpoint used at the very first deployment of a new S-Launch instance to mint the bootstrap admin user. Once an instance has any admin account, this endpoint typically becomes inert (or returns an error) to prevent privilege escalation after the fact.
Scopes
| Scope | Reach |
|---|---|
admin | Activating the instance. |
WARNING
This endpoint creates a privileged admin account. The behavior of subsequent calls after first-time activation is deployment-specific — confirm with your operators before invoking on a non-fresh instance.
Endpoints
Prepare Bootstrap Admin
POST /api/activate/
Creates the bootstrap admin account and returns the credentials needed to sign in for the first time.
Required scope: admin
Request body — ActivationRequest
Response 200 — activation result payload.
See also
- System Defaults — typically run after activation to seed default content.
- Configuration — first-time configuration of mail and other dependencies, usually performed alongside activation.
- Authentication — once activation is complete, sign in via the standard flow.