Skip to main content
POST
Create a tool credential

Authorizations

Authorization
string
header
required

Runner token beginning with agt_r, returned once by POST /v1/runners

Body

application/json

Requests a tool credential for the current work assignment. lease_id determines workspace access; the body cannot select another workspace and contains no token.

integration
string
required

Connected integration that needs a credential.

lease_id
string
required

Current work assignment authorizing this credential request.

scope
string | null

An integration-specific narrowing the broker may honour.

Response

OK

Newly issued tool credential.

expires_at
string<date-time>
required

When it stops working, so the caller re-mints before expiry rather than on failure.

A credential with no upstream expiry carries the far-future instant 9999-12-30T22:00:00.999Z, so the caller's one comparison covers it.

token
string
required

The short-lived, workspace-scoped credential. Secret — never logged, never echoed into a frame.