CAcaveman

POST /org/github/app-manifest/complete

POST /api/v1/org/github/app-manifest/complete on the Caveman Cloud control plane. Requires the org:update scope. Not exposed to autonomous agents: Exchanges the one-use registration code for the customer's App and stores its private key and secrets under this installation's secret provider. Nothing about this step is delegable: an agent must never be able to introduce a source identity.

post/org/github/app-manifest/complete

Request

  • Base URL
    https://api.caveman.so/api/v1
  • URL
    https://api.caveman.so/api/v1/org/github/app-manifest/complete
  • Auth
    • OAuth 2
      Authorization code: /api/v1/oauth/authorize
      Token URL: /api/v1/oauth/token scopes: org:update
    • or HTTP bearer
    • or API key in cookie cave_access
    • or API key in cookie __Secure-cave_identity.session_token

Response

Successful response. Exact status depends on synchronous or durable delivery outcome.

Changes

No recorded changes to this operation across all 1 revision of this API.