Claims one unexpired authorization attempt, exchanges an OAuth code with the provider's accepted PKCE or confidential-client flow or verifies a provider-native installation callback, stores credentials in the approved vault, persists only opaque references, and redirects to the bound Assign return path. Standard OAuth and GitHub App callbacks carry the one-use query state. A Sentry App post-install callback carries code, installationId, and orgSlug and is bound to the initiating browser by a short-lived, callback-scoped HttpOnly Secure SameSite=Lax cookie. Replay is rejected.
Query Parameters
state
string·min 32·max 256
One-use authorization state. Required for standard OAuth and GitHub App callbacks; omitted only by a Sentry App post-install callback, which uses the callback-scoped browser cookie established by the authenticated start operation.
code
string·min 1·max 4096
OAuth authorization code. Required for OAuth callbacks and omitted by provider-native installation callbacks.
installation_id
string·min 1·max 128
Provider-native installation identifier. Accepted only for the matching installation authorization attempt.
installationId
string·min 1·max 128
Sentry App installation UUID supplied by Sentry's post-install redirect. Accepted only with code and orgSlug for the cookie-bound Sentry authorization attempt.
orgSlug
string·min 1·max 100
Sentry organization slug supplied by Sentry's post-install redirect. Accepted only with code and installationId for the cookie-bound Sentry authorization attempt.
setup_action
string·min 1·max 32
Provider-native installation outcome passed through to the matching adapter.
Responses
idRequired
string <uuid>
Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
Example0198ac5e-f9b7-7000-8000-000000000001
workspace_idRequired
string <uuid>
Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
Example0198ac5e-f9b7-7000-8000-000000000001
provider_keyRequired
string·min 2·max 50
display_nameRequired
string·min 1·max 160
statusRequired
string
Values
configuringactivedegradedpausedrevoked
healthRequired
string
Display-safe server-derived health for the current lifecycle. An active GitLab installation linked to a non-online private connector reports needs_attention from stored connector state.
Values
setup_incompletehealthyneeds_attentionpaused
revisionRequired
integer <int64>·min 1
created_atRequired
string <date-time>
RFC 3339 timestamp in UTC.
Example2026-08-15T12:00:00Z
updated_atRequired
string <date-time>
RFC 3339 timestamp in UTC.
Example2026-08-15T12:00:00Z
303Redirect to the bound Assign setup page for browser navigation.
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Retry-After
integer·min 0
Delay in seconds before retrying, when an expected maintenance end is known.
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
