NylorunDocsBeta
Runtime APIArtifacts

Open a capability link

GET
/v1/artifact-links/{token}

Downloads the version the link names, with Range, until it expires (401 token_expired): a file, a folder's file, or a folder's zip. Needs no credential and no Nylorun-Protocol.

Authorization

headerAuthorizationBearer <token>

An application key of the Tenant (PUT /v1/tenant/keys/{keyId}), or Studio's key, derived from the admin key. With Nylorun-Subject and Nylorun-Scopes, it acts for that person, narrowed to those scopes. Never accepted from a browser (Origin).

Path Parameters

token*string

Header Parameters

Nylorun-Protocol?string

The protocol version, 8

Nylorun-Subject?string

The person an application key acts for

Nylorun-Scopes?string

The subject's space-separated scopes; required with a subject

Response Body

The file

response?file*/*
Formatbinary
curl -X GET "https://example.com/v1/artifact-links/string"
"string"

Mint a capability link POST

A short-lived path that downloads one version, with Range, with no other credential: for `<img>` tags, UIs and sharing. Signed by the Runtime with the Tenant's signing key; at most 15 minutes; it opens nothing once the artifact is deleted. A folder's link opens its zip, or with `file` that one file.

Admin SDK

The TypeScript client operators' tools use to call the Management API.