Skip to main content
POST
Mint a credential for a declared tool

Authorizations

Authorization
string
header
required

The opaque agt_r token minted when the runner enrols (POST /v1/runners)

Body

application/json

POST /v1/runners/me/credentials/mint request.

The runner forwards the sandboxed child's ask verbatim. lease_id binds the mint to the lease's workspace SERVER-SIDE — the child never names a workspace, so a prompt-injected child cannot mint for another tenant. The request carries no token.

integration
string
required

Which connected integration to mint for.

lease_id
string
required

The lease the mint is bound to.

scope
string | null

An integration-specific narrowing the broker may honour.

Response

OK

POST /v1/runners/me/credentials/mint reply.

expires_at_ms
integer<int64>
required

Epoch milliseconds after which it stops working, so the caller re-mints before expiry rather than on failure.

token
string
required

The short-lived, workspace-scoped credential. Secret — never logged, never echoed into a frame.