agency-org-proxies

Ensure Proxy

Find-or-create the single proxy agent for an Agency org.

TOS-6492 review r2 (P3): the org triple is validated against a REGISTERED capture connection before anything is created. The ticket's "whoever connects first creates it" applies to whoever connects - i.e. someone whose identity already holds a capture connection for this (source, instance, org) - not to any caller naming an arbitrary triple. Without that check any user could mint a permanent, owner-less, globally listed persona named like a real org, and the link-first prompt would echo the attacker's chosen label as first-party consent text. A typo'd org triple is NOT self-service recoverable: the unique index plus ON DELETE RESTRICT make the row permanent by design, so recovery is an admin action (a platform admin deletes the stray agency_org_proxy_agents row and its unowned proxy Identity directly), matching how other unowned-identity mistakes are corrected today.

post/api/agency-org-proxies

Request

  • Base URL: https://app.thinqos.com (the document declares no server; this is the origin it was published from)
  • URL: https://app.thinqos.com/api/agency-org-proxies
  • Auth: none declared

Headers

x-ingest-keystring nullable
authorizationstring nullable
x-impersonate-identity-idstring nullable

Request body

sourcestring required
instance_idstring required
external_org_idstring required
org_labelstring required

Response

Successful Response

idstring uuid required
sourcestring required
instance_idstring required
external_org_idstring required
org_labelstring required
agent_identity_idstring uuid required
agent_display_namestring nullable required
agent_avatar_urlstring nullable required
created_atstring required

Changes

No recorded changes to this operation across all 2 revisions of this API.