PlatformBootstrap

Get browser-safe application runtime configuration

Returns the sanitized runtime configuration response for a known platform-hosted browser application.

Known application ids include admin-console, platform-onboarding, and license-portal. Unknown application ids are rejected. The response is safe to expose to browser JavaScript and does not include internal Kubernetes or Docker addresses, raw secrets, business-authored credential artifacts, DCQL query bodies, issuer or verifier designs, or service configuration bodies.

The response may use the inbound request origin as the platform base URL. That behavior is for browser runtime wiring only; .well-known protocol metadata continues to use the canonical public endpoint binding for the resolved tenant/service.

tenantKms is the tenant-KMS API service object. It is not a KMS provider inventory. Tenant default providers, platform/internal KMS providers, and additional tenant providers remain managed through the platform-config kms.providers domain.

get/runtime-config/{applicationId}

Path parameters

applicationIdstring required

Platform-hosted application id requesting runtime configuration.

Query parameters

tenantIdstring

Optional tenant selector used to resolve tenant-specific browser wiring.

tenantSlugstring

Optional tenant slug used to derive tenant subdomain API roots.

knownRevisionstring

Last runtime-config revision known by the caller.

Response

Runtime configuration response.

ApplicationRuntimeConfigResponse required— unresolved $ref

Changes