Browse documentation

Keys

Replace a key's value

Gives the key a new value; the previous value is destroyed. A key keeps its kind, and a traded or signed key its recipe unless one is sent. Requires env_vars:write.

PUT/agents/{agentId}/keys/{name}/value

Authorization

AuthorizationBearer <token>

Path parameters

agentIdstringrequired

format: "uuid"

namestringrequired

pattern: "^[A-Z][A-Z0-9_]*$"

Headers

Salambo-Clientstring

Which published Salambo client sent the request, as cli/<version> or sdk/<version>. The CLI and SDK send it on every request; a request without it, or with a value in another shape, is served as usual. The API refuses a CLI below its minimum supported version with 426.

maxLength: 100

Bodyrequired

application/json

object

kindstringrequired

enum: ["fixed","traded","signed"]

valuestring

minLength: 1
writeOnly: true

refreshTokenstring

minLength: 1
writeOnly: true

clientSecretstring

minLength: 1
writeOnly: true

privateKeystring

minLength: 1
writeOnly: true

recipeobject

How the broker trades or signs the key: token URL (HTTPS, public), form fields, headers, JWT claims and response mapping. Holds no secret; a field points at the key's value with { "from": "refresh_token" }.

Additional properties are allowed.

Response

application/json

The key, without its value

object

idstringrequired

format: "uuid"

objectstringrequired

const: "agent_key"

namestringrequired

kindstringrequired

enum: ["fixed","traded","signed"]

allowed_hostsarrayrequired

Show nested schema

Array items

string

git_scopesarrayrequired

The hosts, and optionally repository owners, git uses this key for.

Show nested schema

Array items

object

hoststringrequired

ownerstring | nullrequired

statusstringrequired

enum: ["active","needs_new_token"]

value_updated_atintegerrequired

last_used_atinteger | nullrequired

created_atintegerrequired

updated_atintegerrequired

curl --request PUT \
  --url 'https://YOUR_SALAMBO_BASE_URL/api/v1/agents/{agentId}/keys/{name}/value' \
  --header 'Authorization: Bearer YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '@request.json'

Replace placeholders before running. JSON templates without a sample body read your payload from request.json.

Response

{
  "id": "<string>",
  "object": "agent_key",
  "name": "<string>",
  "kind": "fixed",
  "allowed_hosts": [
    "<string>"
  ],
  "git_scopes": [
    {
      "host": "<string>",
      "owner": "<string | null>"
    }
  ],
  "status": "active",
  "value_updated_at": 123,
  "last_used_at": 123,
  "created_at": 123,
  "updated_at": 123
}