browser-extension

Create Extension Credential

Exchange a full Supabase session for a narrow installation credential.

The extension calls this once right after connecting, stores the opaque credential, and discards the session — so a compromised extension storage leaks a revocable, extension-only bearer instead of the account. Only a full session may mint; an installation credential cannot widen itself. The raw value appears exactly once, in this response.

post/browser-extension/credentials/

Request

  • Base URL: https://api.helloaxel.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.helloaxel.com/browser-extension/credentials/
  • Auth: HTTP bearer

Response

Successful Response

credentialstring required
expires_atstring date-time required
scopesstring[] required

Changes

No operation changes recorded.