Server credentials

Signed-in browser sessions only. Return a valid upstream access token for one environment of the server, refreshing it in Manufact Cloud when it has less than minTtlSec left (reduced for short-lived tokens). Send rejectedTokenSha256 after the MCP server rejected a token to get its replacement. Never falls back to another environment. A still-valid token whose refresh is failing is returned with status: "degraded".

post/api/v1/servers/{id}/credentials/access-token

Request

  • Base URL: https://cloud.manufact.com
  • URL: https://cloud.manufact.com/api/v1/servers/{id}/credentials/access-token
  • Auth: none declared

Path parameters

idstring uuid required

Request body

branchstring nullable required

Environment branch; null for production.

minTtlSecinteger

Minimum remaining validity in seconds (default 60). Reduced for short-lived tokens, so it never forces a refresh per call.

rejectedTokenSha256string

Lowercase hex SHA-256 of an access token the MCP server rejected; asks for a replacement.

Response

OK

accessTokenstring required
tokenTypestring required
expiresAtstring date-time nullable required
credentialIdstring required
generationinteger required
status'active' | 'degraded' required
serverTimestring date-time required

Cloud clock, for client skew correction.

Changes

No recorded changes to this operation across all 1 revision of this API.