credentials

Issue a short-lived scoped token

Issues an opaque, short-lived ACP-managed token bound to the calling user's stored OAuth credential for a provider — the agent never sees the underlying vendor token. 409 with a connectUrl when the provider isn't connected yet. Per-tenant feature flag; 404 when disabled. Rate limited per tenant.

post/api/v1/scoped-tokens

Request

  • Base URL: https://api.agenticcontrolplane.com
  • URL: https://api.agenticcontrolplane.com/api/v1/scoped-tokens
  • Auth: HTTP bearer

Request body

providerstring required

Canonical lowercase provider key (e.g. "github", "google", "slack").

scopesstring[]

Optional narrowing; cannot widen beyond the user's OAuth grant.

ttlSecondsinteger
reasonstring

Response

The scoped token (returned once).

okboolean

Changes

No recorded changes to this operation across all 1 revision of this API.