Authentication

Issue or exchange an OAuth token

Supports Authorization Code, Refresh Token, Device Code, and RFC 8693 Token Exchange. Token Exchange requires HTTP Basic authentication for a registered confidential Agent Runtime. Its subject_token, subject_token_type, resource, and scope fields are required together. Delegation tokens have a maximum 600-second lifetime and never include a refresh_token.

post/oauth/token

Request

  • Base URL: https://qveris.ai/api/v1
  • URL: https://qveris.ai/api/v1/oauth/token
  • Auth: one of:
    • none
    • HTTP basic

Response

Successful Response

OR

Example response

{
  "access_token": "eyJhbGciOiJSUzI1NiIs...",
  "constraints": {
    "max_credits": 25,
    "provider_ids": [
      "openweathermap"
    ],
    "run_id": "run-01J0QVERIS",
    "tool_ids": [
      "openweathermap.weather.execute.v1"
    ]
  },
  "expires_in": 600,
  "issued_token_type": "urn:ietf:params:oauth:token-type:access_token",
  "resource": "https://api.qveris.ai/tools",
  "scope": "tools.inspect tools.execute",
  "token_type": "Bearer"
}

Changes

No recorded changes to this operation across all 1 revision of this API.