Register a provider configuration

Register a configuration shared across the organization’s projects. Names are unique within the organization; duplicate names return 409 without replacing credentials. A configuration serves many wallets. Secret credentials are never returned. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403.

POST /vault-provider-configs

cURL

agentcard

curl --request POST \
  --url https://api.onkernel.com/vault-provider-configs \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "credentials": {
    "client_id": "example-client-id",
    "client_secret": "example-client-secret"
  },
  "name": "my-agentcard",
  "provider": "agentcard"
}
'

201

agentcard

{
  "client_id": "example-client-id",
  "created_at": "2026-01-01T12:00:00Z",
  "id": "vpc_agentcard_example",
  "name": "my-agentcard",
  "provider": "agentcard",
  "test_mode": false,
  "updated_at": "2026-01-01T12:00:00Z"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Option 1

Option 2

Provider-specific settings and credentials for a configuration shared across the organization's projects.

credentials · object · required

Show child attributes

name · string · required

Unique within the organization.

Pattern: ^[a-zA-Z0-9._-]{1,255}$

provider · enum<string> · required

Available options: link

Response

201

application/json

Provider configuration registered

Option 1

Option 2

Response schema for a Link configuration, without secret credentials. Kernel generates the ID and timestamps. Configuration creation uses VaultLinkProviderConfigRequest.

client_id · string · required

OAuth client identity; immutable. Secret credentials are never returned.

created_at · string<date-time> · required · read-only

id · string · required · read-only

name · string · required

Unique within the organization.

Pattern: ^[a-zA-Z0-9._-]{1,255}$

provider · enum<string> · required

Available options: link

updated_at · string<date-time> · required · read-only