Skip to main content
POST
Create run event token

Authorizations

Authorization
string
header
required

Server-issued credential bound to project, run, registered runtime, execution generation, audience, expiry, and explicitly allowed operations; user/API-key editor access is insufficient.

Path Parameters

run_id
string<uuid>
required

Nonterminal direct child of the credential-bound run. Requires a runtime credential allowed to delegate under the current execution generation. Unrelated runs are hidden as not found (404); a terminal parent or child, stale generation, authentication-parked child, or detached child generation returns 409. The resulting event-writer token is bound to this child run.

Response

Scoped event token created. A signed event writer token must be bound to the addressed run.

A short-lived event-append credential for the target child run; never grants finalization, heartbeat, or child creation.

token
string
required
Minimum string length: 1
token_type
enum<string>
required
Available options:
Bearer
expires_at
string<date-time>
required
run_id
string<uuid>
required
permissions
enum<string>[]
required
Required array length: 1 element
Available options:
run.events.append