You can use the auth.create_credentials endpoint, but that would create credentials for the calling user. You can use impersonation as an admin to act on behalf of users using the X-Clearml-Impersonate-As request header, passing the user's ID as value