> ## Documentation Index > Fetch the complete documentation index at: https://tbd-6fc993ce-hypeship-docs-provider-clients.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Register a provider configuration > Register a configuration shared across the organization's projects. Names are unique within the organization; duplicate names return 409 without replacing credentials. A configuration serves many wallets. Secret credentials are never returned. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403. ## OpenAPI ````yaml https://api.onkernel.com/spec.json post /vault-provider-configs openapi: 3.1.0 info: description: Developer tools and cloud infrastructure for AI agents to use web browsers title: Kernel API version: 0.1.0 servers: - description: API Server url: https://api.onkernel.com security: - bearerAuth: [] tags: - description: Create and manage browser sessions. name: Browsers - description: Control mouse, keyboard, and screen on the browser instance. name: Browser Computer Controls - description: Execute Playwright code against the browser instance. name: Browser Playwright - description: Discover and invoke native page tools across the browser instance. name: Browser WebMCP - description: Read, write, and manage files on the browser instance. name: Browser Filesystem - description: Execute and manage processes on the browser instance. name: Browser Processes - description: Record and manage browser session video replays. name: Browser Replays - description: Stream logs from the browser instance. name: Browser Logs - description: >- Stream live telemetry events from a browser session, and manage the destinations sessions export them to. name: Browser Telemetry - description: Create, list, retrieve, and delete browser profiles. name: Profiles - description: Create and manage proxy configurations for routing browser traffic. name: Proxies - description: Create, list, retrieve, and delete browser extensions. name: Extensions - description: Create and manage browser pools for acquiring and releasing browsers. name: Browser Pools - description: Inspect the identity and authorization context for the current request. name: Authentication - description: >- Create and manage auth connections for automated credential capture and login. name: Managed Auth - description: Create and manage credentials for authentication. name: Credentials - description: Configure external credential providers like 1Password. name: Credential Providers - description: List applications and versions. name: Apps - description: Create and manage app deployments and stream deployment events. name: Deployments - description: Invoke actions and stream or query invocation status and events. name: Invocations - description: Read and manage organization-level limits. name: Organization - description: | Create and manage projects for resource isolation within an organization. When projects are disabled for the organization, project operations return `404` with code `projects_disabled`. name: Projects - description: Create and manage API keys for organization and project-scoped access. name: API Keys - description: Read audit log records for the authenticated organization. name: Audit Logs - description: Resolve browser and proxy recommendations for bot-protected sites. name: Config Registry paths: /vault-provider-configs: post: tags: - Vaults summary: Register a provider configuration description: >- Register a configuration shared across the organization's projects. Names are unique within the organization; duplicate names return 409 without replacing credentials. A configuration serves many wallets. Secret credentials are never returned. Requires an organization-scoped credential or dashboard authentication; project-scoped credentials receive 403. operationId: postVaultProviderConfig requestBody: content: application/json: examples: agentcard: value: credentials: client_id: example-client-id client_secret: example-client-secret name: my-agentcard provider: agentcard link: value: credentials: client_id: example-client-id client_secret: example-client-secret name: my-link-client provider: link schema: $ref: '#/components/schemas/VaultProviderConfigRequest' required: true responses: '201': content: application/json: examples: agentcard: $ref: '#/components/examples/ExampleAgentCardConfig' link: $ref: '#/components/examples/ExampleLinkConfig' schema: $ref: '#/components/schemas/VaultProviderConfig' description: Provider configuration registered '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '409': $ref: '#/components/responses/Conflict' '500': $ref: '#/components/responses/InternalError' security: - bearerAuth: [] components: schemas: VaultProviderConfigRequest: description: >- Provider-specific settings and credentials for a configuration shared across the organization's projects. discriminator: mapping: agentcard: $ref: '#/components/schemas/VaultAgentCardProviderConfigRequest' link: $ref: '#/components/schemas/VaultLinkProviderConfigRequest' propertyName: provider oneOf: - $ref: '#/components/schemas/VaultLinkProviderConfigRequest' - $ref: '#/components/schemas/VaultAgentCardProviderConfigRequest' VaultProviderConfig: discriminator: mapping: agentcard: $ref: '#/components/schemas/VaultAgentCardProviderConfig' link: $ref: '#/components/schemas/VaultLinkProviderConfig' propertyName: provider oneOf: - $ref: '#/components/schemas/VaultLinkProviderConfig' - $ref: '#/components/schemas/VaultAgentCardProviderConfig' VaultAgentCardProviderConfigRequest: additionalProperties: false description: >- Register application credentials for AgentCard wallet enrollment and checkout approvals. Kernel obtains application access tokens using client_credentials. properties: credentials: $ref: '#/components/schemas/VaultAgentCardProviderClientCredentials' writeOnly: true name: description: Unique within the organization. pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - agentcard type: string required: - name - provider - credentials type: object VaultLinkProviderConfigRequest: additionalProperties: false description: >- Register a customer-owned Link OAuth client for refreshing and revoking imported wallet grants. The customer is responsible for initiating OAuth flows to connect a user's wallet and handling the redirect to obtain a Link access token and refresh token. properties: credentials: allOf: - $ref: '#/components/schemas/VaultLinkProviderClientCredentials' writeOnly: true name: description: Unique within the organization. pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - link type: string required: - name - provider - credentials type: object VaultAgentCardProviderConfig: additionalProperties: false description: >- Response schema for an AgentCard configuration, without secret credentials. Kernel generates the ID and timestamps and introspects test_mode from the credentials. Configuration creation uses VaultAgentCardProviderConfigRequest. properties: client_id: type: string created_at: format: date-time readOnly: true type: string id: readOnly: true type: string name: pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - agentcard type: string test_mode: description: >- Introspected mode of the selected credential; true means sandbox objects. readOnly: true type: boolean updated_at: format: date-time readOnly: true type: string required: - id - name - provider - client_id - test_mode - created_at - updated_at type: object VaultLinkProviderConfig: additionalProperties: false description: >- Response schema for a Link configuration, without secret credentials. Kernel generates the ID and timestamps. Configuration creation uses VaultLinkProviderConfigRequest. properties: client_id: description: >- OAuth client identity; immutable. Secret credentials are never returned. type: string created_at: format: date-time readOnly: true type: string id: readOnly: true type: string name: description: Unique within the organization. pattern: ^[a-zA-Z0-9._-]{1,255}$ type: string provider: enum: - link type: string updated_at: format: date-time readOnly: true type: string required: - id - name - provider - client_id - created_at - updated_at type: object Error: properties: code: description: Application-specific error code (machine-readable) example: bad_request type: string details: description: Additional error details (for multiple errors) items: $ref: '#/components/schemas/ErrorDetail' type: array inner_error: $ref: '#/components/schemas/ErrorDetail' message: description: Human-readable error description for debugging example: 'Missing required field: app_name' type: string required: - code - message type: object VaultAgentCardProviderClientCredentials: $ref: '#/components/schemas/VaultOAuthClientCredentials' VaultLinkProviderClientCredentials: $ref: '#/components/schemas/VaultOAuthClientCredentials' ErrorDetail: properties: code: description: Lower-level error code providing more specific detail example: invalid_input type: string message: description: Further detail about the error example: Provided version string is not semver compliant type: string type: object VaultOAuthClientCredentials: additionalProperties: false properties: client_id: minLength: 1 type: string client_secret: minLength: 1 type: string writeOnly: true required: - client_id - client_secret type: object examples: ExampleAgentCardConfig: summary: AgentCard configuration response with introspected live mode value: client_id: example-client-id created_at: '2026-01-01T12:00:00Z' id: vpc_agentcard_example name: my-agentcard provider: agentcard test_mode: false updated_at: '2026-01-01T12:00:00Z' ExampleLinkConfig: summary: Link configuration response; no secret credentials value: client_id: example-client-id created_at: '2026-01-01T12:00:00Z' id: vpc_link_example name: my-link-client provider: link updated_at: '2026-01-01T12:00:00Z' responses: BadRequest: content: application/json: schema: $ref: '#/components/schemas/Error' description: Bad Request – invalid input Unauthorized: content: application/json: schema: $ref: '#/components/schemas/Error' description: Unauthorized – missing or invalid authorization token Forbidden: content: application/json: schema: $ref: '#/components/schemas/Error' description: Forbidden – insufficient permissions or plan Conflict: content: application/json: schema: $ref: '#/components/schemas/Error' description: Conflict – resource already exists InternalError: content: application/json: schema: $ref: '#/components/schemas/Error' description: Internal Server Error securitySchemes: bearerAuth: scheme: bearer type: http ````