Error

A valid request URL is required to generate request examples

{
  "ok": true
}

{
  "ok": false,
  "error": "<string>"
}

{
  "ok": false,
  "error": "<string>"
}

{
  "ok": false,
  "error": "<string>"
}

Credentials

Submit tool credentials

Stores encrypted credentials for a user_credentials-enabled tool. Requires an authenticated session. The request body must include the one-time nonce emitted by the tool’s credential request (encrypted, short-lived), plus a map of field names to values. The backend cross-checks the nonce’s userId against the session user to prevent nonce-replay attacks. An optional validate hook on the tool config is called before persisting. On success the credentials are upserted and the tool can proceed on its next invocation.

POST

credentials

submit

Error

A valid request URL is required to generate request examples

{
  "ok": true
}

{
  "ok": false,
  "error": "<string>"
}

{
  "ok": false,
  "error": "<string>"
}

{
  "ok": false,
  "error": "<string>"
}

Authorizations

x-api-key

string

header

required

Organisation API key. Format: sk_<secret>/<keyname> — the secret portion, a literal slash, and the human-readable key name. The header exulu-api-key is accepted as an alias. A Bearer prefix is tolerated and stripped. Keys with an agent scope are only valid for the scoped agent instance.

Body

application/json

nonce

string

required

One-time encrypted nonce from the tool's credentialRequest payload. Short-lived; re-prompt on expiry.

values

object

required

Map of field name to user-supplied value. Must exactly match the field set declared by the tool config.

Show child attributes

Response

Credentials stored.

boolean

required

Example:

true

Get share link content

List stored tool credentials

REST

GraphQL

Core types

Submit tool credentials

Authorizations

Body

Response