/create-mcp-secret-oauth-authorization-code

post

https://api.akeyless.io/create-mcp-secret-oauth-authorization-code

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

accessibility

string

Defaults to regular

for personal password manager

ara-enabled

boolean

Enable or disable Agentic Runtime Authority rule enforcement for this item.
When false, user-defined input/output rules are stored but not enforced;
the base security validation still runs.

AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes
its wire value (see akl.OptionalBool) so an explicit false survives the
curl-proxy relay instead of being dropped like a default-false bool flag.

delete_protection

string

Protection from accidental deletion of this object [true/false]

description

string

Description of the object

enable-agentic-runtime-authority

boolean

EnableAra is the documented spelling of AraEnabled. Both set the same
field; --ara-enabled shipped first and stays as an undocumented alias
so existing scripts and the Terraform provider keep working.

enable-ai-quorum

boolean

Turns on AI Quorum checks for this item.

input-rule

array of strings

Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input)

input-rule

json

boolean

Defaults to false

Set output format to JSON

max-versions

string

Set the maximum number of versions, limited by the account settings defaults.

metadata

string

Deprecated - use description

name

string

required

Secret name

oauth-client-id

string

OAuth client ID

oauth-client-secret

string

OAuth client secret

oauth-redirect-uri

string

OAuth redirect URI

oauth-refresh-token

string

OAuth refresh token

oauth-scopes

array of strings

OAuth scopes

oauth-scopes

oauth-token-url

string

OAuth token URL

output-rule

array of strings

Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)

output-rule

protection_key

string

200

defaulterrorResponse wraps any error to return it as a JSON object with one "error" field.