agent

Register (or rotate) the caller's own Snowflake Cortex Agent PAT.

Forwards the raw Programmatic Access Token to the engine broker to envelope-encrypt (ADR-0082 D2) and stores only the returned ciphertext — the PAT itself is never logged, echoed, or persisted by dvt. accountLocator identifies which Snowflake account the PAT belongs to; re-registering the same accountLocator rotates the credential in place and clears any prior revocation.

put/v1/agent/credential

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/agent/credential
  • Auth: one of:
    • API key in cookie dvt_session
    • HTTP bearer

Request body

accountLocatorstring required

The Snowflake account this PAT authenticates against.

patstring required

The raw Programmatic Access Token. Never stored in plaintext.

expiresAtstring date-time required

Must be in the future — dvt is TOLD the PAT's expiry, not shown it (ADR-0082 D2b).

Response

Registered.

Changes

No recorded changes to this operation across all 1 revision of this API.