Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Kernel Auth Connections API

The Auth Connections API from Kernel — 6 operation(s) for auth connections.

Kernel Auth Connections API is one of 22 APIs that Kernel publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Auth Connections. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 8 operations across 6 paths, and defines 17 schemas. It is described by OpenAPI 3.1.0, at version 0.1.0.

Requests are made against a single base URL, https://api.onkernel.com.

8 operations 6 paths 17 schemas 1 DELETE3 GET4 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
0.1.0
Base URL
https://api.onkernel.com
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Kernel Auth Connections API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

Paths & Operations 8

Across 6 paths, the API surfaces 8 operations — 1 DELETE, 3 GET, 4 POST. Each is listed below with its method, path, parameters, and response codes.

Auth Connections 8
POST
/agents/authdeprecated
Create or find an auth agent
postAgentsAuth body → 200400401403500
GET
/agents/authdeprecated
List auth agents
getAgentsAuth 4 params → 200401500
POST
/agents/auth/invocationsdeprecated
Create an auth invocation
postAgentsAuthInvocations body → 200400401403404500
GET
/agents/auth/{id}deprecated
Get auth agent by ID
getAgentsAuthById 1 param → 200401404500
DELETE
/agents/auth/{id}deprecated
Delete auth agent
deleteAgentsAuthById 1 param → 204401404500
GET
/agents/auth/invocations/{invocation_id}deprecated
Get invocation details
getAgentsAuthInvocationsInvocationId 1 param → 200401404500
POST
/agents/auth/invocations/{invocation_id}/exchangedeprecated
Exchange handoff code for JWT
postAgentsAuthInvocationsExchange 1 param body → 200400404410500
POST
/agents/auth/invocations/{invocation_id}/submitdeprecated
Submit field values
postAgentsAuthInvocationsSubmit 1 param body → 202400401404422500

Schemas 17

The contract defines 17 schemas that model the data the API accepts and returns. The most detailed are AgentAuthInvocationResponse (15 properties), AuthAgent (12 properties), DiscoveredField (8 properties), AuthAgentCreateRequest (6 properties). Each schema is shown below with its type and property counts.

ErrorDetail
object
2 properties
SSOButton
object
An SSO button for signing in with an external identity provider
3 properties 3 required
ManagedAuthExchangeRequest
object
Request to exchange handoff code for JWT
1 property 1 required
Error
object
4 properties 2 required
AgentAuthSubmitRequest
object
Request to submit an auth form. Provide exactly one of fieldvalues, ssobutton, or selectedmfatype.
AgentAuthInvocationResponse
object
Response from get invocation endpoint
15 properties 6 required
AuthAgentInvocationCreateResponse
object
Response from creating an invocation. Always returns an invocationid.
5 properties 5 required
AuthAgentInvocationCreateRequest
object
Request to create an invocation for an existing auth agent
2 properties 1 required
AuthAgent
object
An auth agent that manages authentication for a specific domain and profile combination
12 properties 4 required
AuthAgentCreateRequest
object
Request to create or find an auth agent
6 properties 2 required
DiscoveredField
object
A discovered form field
8 properties 4 required
CredentialReference
object
Reference to credentials for the auth connection. Use one of: - { name } for Kernel credentials - { provider, path } for external provider item - { provider, a…
4 properties
MFAType
string
The MFA delivery method type. Includes 'password' for auth method selection pages and 'switch' for generic method-switcher links like "Use another method" that…
SignInOption
object
A non-MFA choice presented during the auth flow (e.g. account selection, org picker)
3 properties 2 required
AgentAuthSubmitResponse
object
Response from submit endpoint - returns immediately after submission is accepted
1 property 1 required
ManagedAuthExchangeResponse
object
Response from exchange endpoint
2 properties 2 required
MFAOption
object
An MFA method option for verification
4 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

kernel-so-auth-connections-api-openapi.yml Raw ↑

Other APIs Kernel publishes across the network.

Kernel MCP Server
Kernel API Keys API
Kernel Apps API
Kernel Browser Computer Controls API
Kernel Browser Filesystem API
Kernel Browser Logs API
Kernel Browser Playwright API
Kernel Browser Pools API
Kernel Browser Processes API
Kernel Browser Replays API
Kernel Browser Telemetry API
Kernel Browsers API