Skip to main content
POST
Register a runner

Authorizations

Authorization
string
header
required

Send a dashboard session token, an account API key (agt_t), or a command-line credential (afc_) as a Bearer token. Each endpoint lists accepted credential types.

Body

application/json

POST /v1/runners request. Authorized by an existing operator credential, not an enrollment token. The operator ASSIGNS the policy; the host never declares one.

assigned_policy
object
required

The policy the operator assigns to it.

host_id
string
required

Stable identifier for the host being enrolled.

labels
string[]
required

Operator labels for placement and filtering. A label given twice is stored once.

Response

Runner registered; the bearer token is returned exactly once

Registered runner and its access token. Save the token securely; it is returned once and only its hash is stored.

assigned_policy
object
required

The assignment AS STORED, with the worker count clamped, so the enrolling operator sees exactly what the host will apply.

runner_id
string
required

The runner's durable identifier.

runner_token
string
required

The minted bearer token. Secret — revealed once, never re-readable.