Sign in

v2

latestOpenAPI 3.0.4Apache 2.0raw.githubusercontent.com2026-07-1754198241.7 KB
RouteExposures

Create a route exposure descriptor

Creates or replaces a route exposure descriptor for an externally initiated connector capability. This registers the externally callable surface but does not by itself implement the runtime endpoint for the external caller.

post/route/exposures

Request body

Example request

{
  "exposure": {
    "exposureDescriptorId": "proof-vault-read-exposure",
    "exposedCapabilityId": "proof-vault-read",
    "owningTenantId": "acme",
    "logicalConnectionBindingId": "brand-a-proof-vault",
    "exchangeMode": "EXTERNALLY_INITIATED_READ",
    "allowedOperation": "READ",
    "acceptedAuthMethods": [
      "bearer",
      "mtls"
    ]
  }
}

Response

Route exposure descriptor created.

exposureDescriptorIdstring required

Stable identifier of an externally callable route exposure descriptor.

exposedCapabilityIdstring required
owningTenantIdstring required

Tenant identifier used by tenant-scoped connector registration, routing, and execution.

organizationUnitIdstring
brandIdstring
logicalConnectionBindingIdstring required

Stable identifier of a tenant, OU, brand, legal-entity, or channel usage binding for a physical connector instance.

exchangeMode'PLATFORM_INITIATED_PULL' | 'PLATFORM_INITIATED_PUSH' | 'EXTERNALLY_INITIATED_READ' | 'EXTERNALLY_INITIATED_WRITE' | 'SUBSCRIPTION_CALLBACK' | 'BIDIRECTIONAL_SYNC' required

Explicit exchange quadrant. Data direction and initiation side remain separate axes in run responses.

allowedOperation'READ' | 'WRITE' | 'UPDATE' | 'DELETE' | 'UPSERT' | 'QUERY' | 'SEARCH' | 'IMPORT' | 'EXPORT' | 'INVOKE' | 'DISCOVER' | 'VALIDATE' required

Reusable operation taxonomy shared by connectors, inventory, policy, and workflows. The operation kind is logical; connector-local details live in operationName.

acceptedAuthMethodsstring[] required
requestSchemaRefstring
responseSchemaRefstring
cursorStrategystring
idempotencyKeyStrategystring
payloadLimitBytesinteger
rateLimitKeystring
auditCategory'PROTOCOL_ISSUANCE' | 'PROTOCOL_VERIFICATION' | 'FORM' | 'PORTAL' | 'WORKFLOW' | 'DATASPACE' | 'INDUSTRIAL' | 'EXTERNAL_EXCHANGE' | 'VAULT' | 'SYSTEM_CATALOG'

Audit category used by governed connector invocations, runs, and externally callable route exposures.

Example response

{
  "exposureDescriptorId": "proof-vault-read-exposure",
  "exposedCapabilityId": "proof-vault-read",
  "owningTenantId": "acme",
  "organizationUnitId": "nl-ops",
  "brandId": "brand-a",
  "logicalConnectionBindingId": "brand-a-proof-vault",
  "exchangeMode": "EXTERNALLY_INITIATED_READ",
  "allowedOperation": "READ",
  "acceptedAuthMethods": [
    "bearer",
    "mtls"
  ],
  "payloadLimitBytes": 1048576,
  "auditCategory": "EXTERNAL_EXCHANGE"
}