---
title: "Borrow a stored third-party credential at call time"
method: POST
path: "/api/v1/agent_credentials/resolve"
tags: ["Credentials"]
---

# Borrow a stored third-party credential at call time

`POST /api/v1/agent_credentials/resolve`

## Request

- Base URL: `https://saltapp.ai`
- URL: `https://saltapp.ai/api/v1/agent_credentials/resolve`
- Auth: API key in header `api-key`

Any api-key caller. An account borrowing its OWN credential (owner_id = itself) needs no grant; otherwise the owner must have granted it. One 403 ("no credential available") for every failure -- unknown owner, no grant, no stored credential -- so the broker never discloses which owners exist. An MCP-kind connector is refused here (409) -- call POST /api/v1/mcp/:provider instead, since an MCP credential is never handed out.

## Request body

- object
  - `provider` string, required
  - `owner_id` string, required

## Response `200`

OK. Never cached (Cache-Control: no-store).

- object
  - `provider` string
  - `base_url` string, nullable
  - `auth_header` string
  - `auth_scheme` string
  - `token` string

## Other responses

- `401`: Missing or invalid credentials.
- `403`: no credential available
- `409`: is an MCP connector: call POST /api/v1/mcp/ instead

---

[API](https://skmtc.dev/saltapp/apis/salt-agent-api.md) · [All operations](https://skmtc.dev/saltapp/apis/salt-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/saltapp/apis/salt-agent-api/revisions/a8b8642ab7f8?raw)