Create a scoped Agent Connection

Creates a short-lived, least-privilege lcac_ credential for MCP and wrapped execution. Because the returned credential can spend credits, callers must hold both credentials:manage and credits:move rather than delegating spend authority they do not hold. A secret key with both scopes may automate this route; human callers must be a workspace owner or admin with fresh MFA/passkey step-up.

post/credits/agent-connections

Request

Base URL
https://api.paywithlocus.com/api
URL
https://api.paywithlocus.com/api/credits/agent-connections
Auth
- HTTP bearer
- or HTTP bearer

Headers

X-Locus-Step-Upstring password

Short-lived raw MFA/passkey step-up token bound to the authenticated Cognito subject. Send it alongside the dashboard Bearer token for workspace-administrator mutations when the base session does not itself prove MFA within the last ten minutes. Never send it with a tenant secret key.

Request body

namestring required

mode'platform' | 'end_user' required

externalUserIdstring

Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

maxCreditsPerCallstring

Non-negative exact decimal string with at most six fractional digits. Endpoint-specific positivity and amount limits still apply.

maxCreditsPerLoopstring

Non-negative exact decimal string with at most six fractional digits. Endpoint-specific positivity and amount limits still apply.

expiresInSecondsinteger

Response

Connection created; credential is returned once

successunknown required

Changes

No recorded changes to this operation across all 1 revision of this API.