"system": true for the protected _sys scope. Platform administrators can select the _sys organization, which platform-wide calls such as Rotate JWT signing keys need.
Path parameters
curl -X POST http://localhost:5080/api/v1/orgs/<organization-id>/select \
-H "authorization: Bearer $MS_JWT"
{
"token": "eyJhbGciOi...",
"user_id": "<user-id>",
"org_id": "<organization-id>",
"org_name": "default",
"display_role": "Owner",
"roles": [
{ "id": "<role-id>", "key": "owner", "name": "Owner", "builtin": true }
]
}
Authentication
Select a workspace
Switch the active organization and get a token scoped to it.
curl -X POST http://localhost:5080/api/v1/orgs/<organization-id>/select \
-H "authorization: Bearer $MS_JWT"
{
"token": "eyJhbGciOi...",
"user_id": "<user-id>",
"org_id": "<organization-id>",
"org_name": "default",
"display_role": "Owner",
"roles": [
{ "id": "<role-id>", "key": "owner", "name": "Owner", "builtin": true }
]
}
Last modified on October 9, 2026