---
title: "Store encrypted auth state (LOCAL-ONLY)"
method: POST
path: "/api/v0/tasks/{id}/auth-state"
tags: ["Agent"]
---

# Store encrypted auth state (LOCAL-ONLY)

`POST /api/v0/tasks/{id}/auth-state`

## Request

- Base URL: `https://app.vibeflow.tools`
- URL: `https://app.vibeflow.tools/api/v0/tasks/{id}/auth-state`
- Auth: HTTP bearer

Local-only concept (§2.5) — cloud answers 501 { code: LOCAL_ONLY }. Write — Phase 3.

## Path parameters

- `id` string, required

## Request body

- AuthStateInput
  - `authState` object, required
  - `taskAuthor` string, required

## Response `200`

Store encrypted auth state (LOCAL-ONLY) — success

- AuthStateResult
  - `success` boolean, required

## Other responses

- `400`: Malformed request (includes invalid task/comment id form)
- `401`: Missing or invalid principal
- `403`: Lacking scope or membership
- `404`: Unknown id
- `429`: Rate limited — cloud per-token quota exceeded (reads 300/min, writes 60/min, token creation 10/hour); counters are per-replica, so the effective limit is the configured value × replicas. The response carries Retry-After.
- `501`: Local-only operation on the cloud surface

---

[API](https://skmtc.dev/vibeflow/apis/vibeflow-api-v0.md) · [All operations](https://skmtc.dev/vibeflow/apis/vibeflow-api-v0/llms.txt) · [OpenAPI document](https://skmtc.dev/vibeflow/apis/vibeflow-api-v0/revisions/efd4ba944b0b?raw)