API reference · Credential broker

Store a credential agents can use without seeing it

POST /fabric/broker/credentials

Last reviewed 2026-10-02

POST /fabric/broker/credentials

Request body

CredentialRequest (required)

Responses

Try it

The request goes from your browser straight to this site. Your key is not stored unless you tick the box, and then only in this tab's session storage.

Code

curl -sS -X POST 'https://cainstudio.online/fabric/broker/credentials' \
  -H "X-API-Key: $CAIN_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"name": "name", "kind": "bearer", "secret": "secret", "allowed_hosts": ["allowed-hosts"]}'

import json, os, urllib.request

req = urllib.request.Request('https://cainstudio.online/fabric/broker/credentials', method='POST',
    headers={"X-API-Key": os.environ["CAIN_API_KEY"], "Content-Type": "application/json"},
    data=json.dumps({
      "name": "name",
      "kind": "bearer",
      "secret": "secret",
      "allowed_hosts": [
        "allowed-hosts"
      ]
    }).encode())
with urllib.request.urlopen(req, timeout=60) as r:
    print(r.status, json.load(r))

const res = await fetch("https://cainstudio.online/fabric/broker/credentials", {
  method: "POST",
  headers: {
    "X-API-Key": process.env.CAIN_API_KEY!,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "name": "name",
    "kind": "bearer",
    "secret": "secret",
    "allowed_hosts": [
      "allowed-hosts"
    ]
  }),
});
console.log(res.status, await res.json());

Schemas used

CredentialRequest · HTTPValidationError · ValidationError

← Brokered credentials (the secrets are never returned) · all 4 Credential broker calls · Revoke a brokered credential →