connections

Create a connection (material in body, sealed on arrival) [org:write + admin; this door only]

Create a connection (material in body, sealed on arrival) [org:write + admin; this door only]

post/preview/connections

Request

  • Base URL: https://autoresearch.sfcompute.com
  • URL: https://autoresearch.sfcompute.com/preview/connections
  • Auth: HTTP bearer

Query parameters

workspacestring

Act in this workspace (its slug). Omitted: the token's bound workspace, then the organization's default. Never ambient - there is no switch-workspace mutation on this door.

Request body

access_key_idstring nullable

s3-keys identity.

authstring nullable

How access is established: "token" (a pasted secret, the default) or "oauth" (huggingface only - a browser consent dance through WorkOS Pipes; no material exists anywhere our side, tokens are minted at use).

endpointstring nullable
headerstring nullable

https identity: the header the material rides (default "authorization", value "Bearer <material>").

kindstring required
materialstring nullable

The secret half (s3 secret key, HF token, bearer). Sealed on arrival, never echoed by anything. NEVER an MCP parameter - this struct is deliberately not a tool schema.

namestring required
orgstring nullable

Act in this org (uuid or name); omitted = the bound/active org.

regionstring nullable
scopestring required

The human-facing scope pin (e.g. "s3://acme-ml/corpus-v3/", "acme/*", "https://data.corp.example/exports/").

usernamestring nullable

registry identity: the login name the token belongs to - a GHCR username, a Quay/Harbor robot account, "_json_key" for a GCP Artifact Registry service-account key. Non-secret; the token itself rides material.

validateboolean nullable

Live-validate against the provider before saving (s3-keys: a one-object listing under the pin). Default true; Terraform-ish bootstrap passes false.

verbsstring[] nullable

What the connection may do: ["read"] (the default) or ["read", "write"] (docs/designs/secrets.md: write enables export_data pushes to the pin). The customer's own provider policy is the real wall; this is our enforcement of intent.

Response

The capability's JSON result.

objectstring

The resource type, when the result is one resource.

Changes

No recorded changes to this operation across all 1 revision of this API.