Complete a provider authorization with a user-supplied credential

POST/api/v1/workspaces/{workspace_id}/integration-authorizations/credential

Claims the matching unexpired installation state for the same signed-in Workspace actor, validates the credential directly with a provider that has no scoped OAuth flow, stores it in the approved vault, and persists only opaque references. The credential is accepted only in this authenticated JSON body and is never returned, placed in a URL, or written to browser storage. Replay and cross-actor completion are rejected.

Path Parameters

workspace_idRequired

string <uuid>

Example0198ac5e-f9b7-7000-8000-000000000001

Header Parameters

X-CSRF-TokenRequired

string·min 43·max 43

Session-bound CSRF token. It must exactly match the __Host-assign_csrf cookie sent with the request.

Request Body

application/json

stateRequired

string·min 32·max 256

credentialRequired

string·min 16·max 256

Provider credential submitted only to the authenticated completion endpoint. Clients must not persist, log, or place this value in a URL.

Responses

Authentication · Conventions and errors · API guides · Resource reference

Complete a provider authorization with a user-supplied credential