Create a credential provider

Configure an external credential provider (e.g., 1Password) for automatic credential lookup.

POST /org/credential_providers

Create a credential provider

cURL

curl --request POST \
  --url https://api.onkernel.com/org/credential_providers \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "my-1password",
  "provider_type": "onepassword",
  "token": "ops_eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "cache_ttl_seconds": 300
}
'

201

{
  "created_at": "2025-01-15T10:30:00Z",
  "enabled": true,
  "id": "credprov_abc123xyz",
  "name": "my-1password",
  "priority": 0,
  "provider_type": "onepassword",
  "updated_at": "2025-01-15T10:30:00Z"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Request to create an external credential provider

name · string · required

Human-readable name for this provider instance (unique per org). Surrounding whitespace is trimmed and the trimmed value must be non-empty.

Minimum string length: 1

Pattern: \S

Example:

"my-1password"

provider_type · enum<string> · required

Type of credential provider

Available options: onepassword

Example:

"onepassword"

token · string · required

Service account token for the provider (e.g., 1Password service account token)

Example:

"ops_eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

cache_ttl_seconds · integer · default: 300

How long to cache credential lists (default 300 seconds)

Example:

300

Response

201

application/json

Credential provider created successfully

An external credential provider (e.g., 1Password) for automatic credential lookup

created_at · string<date-time> · required

When the credential provider was created

Example:

"2025-01-15T10:30:00Z"

enabled · boolean · required

Whether the provider is enabled for credential lookups

Example:

true

id · string · required

Unique identifier for the credential provider

Example:

"credprov_abc123xyz"

name · string · required

Human-readable name for this provider instance

Example:

"my-1password"

priority · integer · required

Priority order for credential lookups (lower numbers are checked first)

Example:

0

provider_type · enum<string> · required

Type of credential provider

Available options: onepassword

Example:

"onepassword"

updated_at · string<date-time> · required

When the credential provider was last updated

Example:

"2025-01-15T10:30:00Z"