Register a provider configuration

Register a configuration shared across the organization’s projects. Names are unique within the organization; duplicate names return 409 without replacing credentials. A configuration serves many wallets. Secret credentials are never returned. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403.

POST /vault-provider-configs

cURL

agentcard

curl --request POST \ --url https://api.onkernel.com/vault-provider-configs \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data ' { "credentials": { "client_id": "example-client-id", "client_secret": "example-client-secret" }, "name": "my-agentcard", "provider": "agentcard" } '

201

agentcard

{ "client_id": "example-client-id", "created_at": "2026-01-01T12:00:00Z", "id": "vpc_agentcard_example", "name": "my-agentcard", "provider": "agentcard", "test_mode": false, "updated_at": "2026-01-01T12:00:00Z" }

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Option 1

Option 2

Provider-specific settings and credentials for a configuration shared across the organization's projects.

credentials · object · required

Show child attributes

name · string · required

Unique within the organization.

Pattern: ^[a-zA-Z0-9._-]{1,255}$

provider · enum<string> · required

Available options: link

Response

201

application/json

Provider configuration registered

Option 1

Option 2

Response schema for a Link configuration, without secret credentials. Kernel generates the ID and timestamps. Configuration creation uses VaultLinkProviderConfigRequest.

client_id · string · required

OAuth client identity; immutable. Secret credentials are never returned.

created_at · string<date-time> · required · read-only

id · string · required · read-only

name · string · required

Unique within the organization.

Pattern: ^[a-zA-Z0-9._-]{1,255}$

provider · enum<string> · required

Available options: link

updated_at · string<date-time> · required · read-only