---
title: "Create Integration Auth"
method: POST
path: "/v1/integrations/{integrationId}/auth"
tags: ["Integration Auth"]
---

# Create Integration Auth

`POST /v1/integrations/{integrationId}/auth`

Creates and stores authentication credentials for an integration. Supports three auth types: API Key, Basic auth, and Bearer token. Returns the created auth record including its authId, which is required for subsequent get, update, and delete calls.

## Path parameters

- `integrationId` string, required

## Request body

- CreateIntegrationAuthRequest — Defines authentication credentials for a third-party integration. Use this to tell the system how to authenticate outbound API requests. Select an authType and provide only the fields required for that type. All other fields will be ignored. This configuration is applied automatically to every request made using this integration.
  - `authType` 'NO_AUTH' | 'BASIC_AUTH' | 'BEARER_TOKEN' | 'API_KEY', required — Specifies the authentication method used for outgoing requests. Choose based on how the target API expects credentials: API_KEY → when a key must be sent via header or query parameter. BEARER_TOKEN → when a token is sent in the Authorization header. BASIC_AUTH → when username/password is required. NO_AUTH → when no authentication is needed. This field determines which other fields must be provided.
  - `token` string — Access token used for Bearer authentication. Required only when authType is BEARER_TOKEN. Automatically added to requests as: Authorization: Bearer <token>.
  - `username` string — Username used for Basic authentication. Required only when authType is BASIC_AUTH. Combined with password and encoded into the Authorization header.
  - `password` string — Password used for Basic authentication. Required only when authType is BASIC_AUTH. Combined with username and encoded into the Authorization header.
  - `apiKey` ApiKeyRequest — Defines how an API key is attached to outgoing requests. Use this when the API requires a key in headers or query parameters.
    - `key` string, required — Name of the header or query parameter that carries the API key. Must match what the target API expects.
    - `value` string, required — The API key or secret value sent with each request.
    - `position` 'header' | 'query', required — Where the API key should be added in the request. header → sent as an HTTP header (most common). query → appended to the request URL.
  - `headers` HeaderEntry[] — Optional static headers that will be included in every outgoing request. Useful for fixed metadata or required headers that do not change per request. These are applied in addition to authentication headers.
    - `key` string, required — HTTP header name exactly as expected by the target API.
    - `value` string, required — Static value for this header sent with every request. Must be a fixed string — use queryParams or bodyParams for dynamic values.

## Response `201`

Created

- IntegrationAuthResponse
  - `authId` string — Unique identifier for the auth record
  - `integrationId` string — Unique identifier of the parent integration
  - `authType` 'NO_AUTH' | 'BASIC_AUTH' | 'BEARER_TOKEN' | 'API_KEY' — The authentication strategy this credential set uses. Determines which credential fields are required: API_KEY — provide the apiKey object (key name, secret value, and position). BEARER_TOKEN — provide the token field. BASIC_AUTH — provide username and password fields. NO_AUTH — no credential fields required.
  - `headers` object — Optional list of static HTTP headers attached to every outbound request under this auth. Applied on top of any headers defined at the integration or tool level. Useful for fixed metadata headers required by the third-party API.
  - `createdAt` string, date-time — Timestamp when the record was created
  - `updatedAt` string, date-time — Timestamp when the record was last updated

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

---

[API](https://skmtc.net/sigmamind/apis/sigmamind-apis.md) · [All operations](https://skmtc.net/sigmamind/apis/sigmamind-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sigmamind/sigmamind-apis/versions/d00f52b5123f/schema)