Browser Bridge

Redeem a grant for the credential it authorised. Takes the browser session token and the bridge credential, and refuses an agent principal — the agent asks which binding, the bridge collects the answer.

post/v1/agents/{id}/browser/fills/consume

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/agents/{id}/browser/fills/consume
  • Auth: HTTP bearer

Headers

x-1claw-bridge-credentialstring required
x-1claw-bridge-sessionstring required

The bs_ session token. Proof the redemption belongs to a session this bridge opened.

x-1claw-bridge-versionstring required

Request body

session_idstring uuid required
grant_idstring uuid required
generationinteger required

The bridge's navigation counter now. A mismatch means the page moved after the decision.

Response

The credential itself, as raw bytes — the only route in the feature that returns secret material. Not a JSON envelope: the bridge adopts the body into a zeroable buffer, and a wrapper would force it to parse, interning the secret as a string that lives until GC. Metadata rides in x-1claw-binding-id and x-1claw-form-fingerprint; the response is cache-control: no-store.

Changes

No recorded changes to this operation across all 1 revision of this API.