---
title: "Vend Mount Container Credentials"
method: GET
path: "/api/workspace/credentials/mount"
tags: ["workspace-credentials"]
---

# Vend Mount Container Credentials

`GET /api/workspace/credentials/mount`

Mount vend in the ECS container-credentials wire shape.

The COS host's FUSE client points ``AWS_CONTAINER_CREDENTIALS_FULL_URI``
at this route (HTTPS, with ``AWS_CONTAINER_AUTHORIZATION_TOKEN`` carrying
``Bearer <box store token>``), and the AWS SDK re-fetches as each
15-minute STS session expires. This is a GET returning the ECS credential
JSON contract because that is the one rotating-credential protocol every
AWS SDK speaks over plain HTTP -- ``credential_process`` was tried first
and lost: older vendored SDKs cap process output at 1 KiB, which an STS
session token alone overflows.

## Query parameters

- `mount_uri` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api.md) · [All operations](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quadrillion/quadrillion-cloud-api/revisions/c53108d35a70/schema)