Agents

Create a secret → tool binding (rehydration policy)

Authorises the enclave to rehydrate the ⟦sk:…⟧ placeholder for secret_path into tool_name at arg_path — and only when the call's destination host is one of destination_hosts. Redaction replaces vault secrets in prompts with deterministic placeholders the model can place but never read; a placeholder is substituted back only inside an authorised tool-call argument, at the moment the enclave performs the call (execution_mode: "tee"). No binding, wrong argument, wrong host, bad checksum or an unknown tag is a 403 at execution time. Human users only; up to 200 per agent.

post/v1/agents/{agent_id}/tool-bindings

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/agents/{agent_id}/tool-bindings
  • Auth: HTTP bearer

Path parameters

agent_idstring uuid required

Request body

secret_pathstring required

Vault path of the secret the placeholder stands for

tool_namestring required

Tool the binding applies to (http_request, run_sql, …) or *

arg_pathstring

JSON pointer into the tool's arguments (/headers/Authorization, /body/*) or * (default)

destination_hostsstring[] required

Hosts the rehydrated call may reach (api.stripe.com, *.googleapis.com); required

Response

Created

idstring uuid required
org_idstring uuid required
agent_idstring uuid required
secret_pathstring required
tool_namestring required
arg_pathstring required
destination_hostsstring[] required
created_bystring uuid nullable
created_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.