Register an opaque handle to an already-enrolled provider secret.
POST
/api/admin/agent-secret-refs
Code sample: Shell / cURL
curl --request POST \ --url https://auth.example.com/api/admin/agent-secret-refs \ --header 'Content-Type: application/json' \ --cookie authrim_admin_session=<authrim_admin_session> \ --data '{ "resource_type": "example", "resource_id": "example", "purpose": "example", "provider_key": "example", "expires_at": 1 }'This endpoint never accepts or returns the secret value, creates or confirms the tenant-bound KeyManager entry, and is unavailable to Agent bearer contexts.
Authorizations
Section titled “Authorizations ”Request Body required
Section titled “Request Body required ” Media type application/json
object
resource_type
required
string
resource_id
string
purpose
required
string
provider_key
required
Tenant-owned KeyManager locator using the tenant:{tenant_id}:agent: prefix; never a secret value.
string
expires_at
Optional Unix epoch milliseconds, no more than one year in the future.
integer format: int64
key
additional properties
Example generated
{ "resource_type": "example", "resource_id": "example", "purpose": "example", "provider_key": "example", "expires_at": 1}Responses
Section titled “ Responses ”Opaque secret reference created.
Error response.
Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "message": "example", "error_description": "example"}