Skip to content
Extrovert Extrovert Docs

Create an independently surviving credential

POST
/v1/admin/connections/{connection_id}/credentials

Requires the active connection matching connection_id. A project connection needs credential:delegate and can grant only its own project and a subset of its scopes. Sub-manager delegation requires credential:delegate explicitly in the child. Credentials have independent expiry and revocation. The secret is returned only once.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
connection_id
required
string

Request Body required

Section titled “Request Body required ”

Use the authorization response’s server-derived allowed_reaches and allowed_scopes. Assistant authorizations permit inboxes or project reach only. The profile cannot be supplied or widened by this payload. When supported and requested by the client, openid and email require explicit consent and must be retained in scopes; they disclose the authorizing human’s identifier and verified email, not an agent mailbox, and grant no business action. The extrovert:connect handshake never implicitly grants identity scopes.

object
name
required
string
<= 100 characters
identity
required
string
Allowed values: personal_assistant dedicated_agent
agent_id
string
agent_org_id
string
reach
required
string
Allowed values: inboxes project organization full_account
org_id
string
project_id
string
inbox_ids
Array<string>
<= 100 items
scopes
required

Explicit action and requested identity scopes within the server-derived profile ceiling.

Array<string>
<= 64 items
duration

Full account control defaults to 24h.

string
Allowed values: 24h until_revoked
full_control_confirmed

Required explicit consent for full account control including self-approval and lasting created credentials.

boolean

Responses

Section titled “ Responses ”

201

Section titled “201 ”

Independent credential created; store its secret now

object
connection
required

Explicit consent bound to one connection; token refresh never extends grant expiry. The immutable capability profile is a distribution ceiling, not an account role. Full preserves existing permissions; assistant permits only selected inboxes or one project and excludes commerce, administration, delegation, credentials, quotas and webhooks. Independently created credentials on the full profile retain their own lifetimes.

object
id
required
string
capability_profile

Server-derived immutable ceiling. An absent legacy value means full compatibility, never new full-account permission.

string
Allowed values: full assistant
authorizer_id
required
string
client_id
required
string
name
required
string
identity
required
string
Allowed values: personal_assistant dedicated_agent
agent_id
string
agent_org_id
string
reach
required
string
Allowed values: inboxes project organization full_account
org_id
string
project_id
string
inbox_ids
Array<string>
<= 100 items
scopes
required
Array<string>
created_by_connection_id

Creation provenance; parent expiry and revocation do not cascade.

string
consent_version
string
created_at_ms
required
integer format: int64
expires_at_ms
required

Fixed grant deadline in Unix milliseconds. Zero means until revoked.

integer format: int64
revoked_at_ms
required
integer format: int64
last_used_at_ms
integer format: int64
credential
required
string
resource
required
string

403

Section titled “403 ”

This is not the authenticated full-account connection