A valid request URL is required to generate request examples{
"flag": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"environment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"key": "<string>",
"enabled": true,
"segment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"rollout_percentage": 123,
"archived_at": "2023-11-07T05:31:56Z",
"created_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z"
},
"propagation": {
"seconds": 123,
"note": "<string>"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Create a feature flag
Requires flags:manage. Keys are unique per environment; a duplicate answers 409 flag_exists.
enabled defaults to false: a flag exists before the code behind it is ready, so creating one never turns anything on.
segment_id is the only way to aim a flag at somebody in particular — there is no filter of its own, on purpose, so the audience is the one your surveys and changelog posts already use. It must name a segment of the same environment.
rollout_percentage is a percentage of that audience, evaluated after it. null means no ramp at all, which is a different statement from 0 (“aimed, currently reaching nobody”). The bucket is stable per visitor and per flag: the same person gets the same answer forever, and being in the unlucky tenth of one rollout says nothing about the next.
A valid request URL is required to generate request examples{
"flag": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"environment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"key": "<string>",
"enabled": true,
"segment_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"rollout_percentage": 123,
"archived_at": "2023-11-07T05:31:56Z",
"created_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z"
},
"propagation": {
"seconds": 123,
"note": "<string>"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Authorizations
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange. Only a 401 means it is spent; not_a_member (403) is about the organization named in X-Organization-Id and leaves the token good for the others.
Headers
The organization the caller is acting on — the org_… code that appears in the panel URL. It identifies; the membership JOIN is what authorizes, so a forged code reads nothing: the answer is not_a_member (403), which does not mean the session is over. Absent, the session's default organization answers, or — if that membership was revoked while the session was open — any other one the caller still holds.
Query Parameters
Which environment to act in. A view parameter, valid only on the staff surface — a machine credential never chooses its environment, it is resolved from the key.
live, test Body
Response
The flag.
A release switch, aimed at a segment and never at a filter of its own. The bucketing salt is deliberately not part of this: it is the one value that would let somebody compute which bucket they are in and pick an identifier that lands inside a ramp.
Show child attributes
Show child attributes
How long a flip takes to reach a page, reported by the API rather than assumed by a screen — it is the sum of three things this API decides, and a screen that hard-coded it would go on claiming the old number.
Show child attributes
Show child attributes