NylorunDocsBeta
Runtime APIAgentsSecrets

List an Agent's secrets

GET
/v1/agents/{agentId}/secrets

Each secret's name, type and binding (its URL, or its hosts and header). Never a value.

Authorization

headerAuthorizationBearer <token>

An application key of the Tenant (PUT /v1/tenant/keys/{keyId}), or Studio's key, derived from the admin key. With Nylorun-Subject and Nylorun-Scopes, it acts for that person, narrowed to those scopes. Never accepted from a browser (Origin).

Path Parameters

agentId*string

The Agent id, percent-encoded: users%2Falice%2Ftriage for users/alice/triage

Header Parameters

Nylorun-Protocol*string

The protocol version, 18

Nylorun-Subject?string

The person an application key acts for

Nylorun-Scopes?string

The subject's space-separated scopes; required with a subject

Response Body

The secrets

application/json
  1. response
secrets*array<>
import { createClient } from "@nylorun/agents";const client = await createClient();const secrets = await client.agents.secrets.list("users/alice/assistant"); // metadata only
{  "secrets": [    {      "name": "string",      "type": "bearer",      "binding": {        "url": "string",        "allowedHosts": [          "string"        ],        "inject": {          "header": "string",          "format": "string"        }      },      "headerNames": [        "string"      ],      "via": "string",      "toolPrefix": "string",      "identity": {        "header": "string"      },      "createdAt": "string",      "rotatedAt": "string"    }  ]}

Whether the Runtime holds a definition file HEAD

`200` when the Tenant holds the file, `404` when it does not: upload it.

Get an Agent's secret GET

Its name, type and binding. Never its value.