extension.connection.set

Arm a self-installed app’s connection credential (the orange) in the operator’s own tenant; Owner-gated.

• Scope: extensions.egress.consent
• System: no
• Reachable from: POST /v1/commands/extension.connection.set (tenant credential) · MCP tool extension.connection.set · SDK client.call('extension.connection.set', …)
• Events: none — It writes a credential to the vault write-only (broker-only, never read back). A secret must not become an outbox payload, and no read surface exposes it.

Input (JSON Schema)

{
  "properties": {
    "connection_name": {
      "minLength": 1,
      "type": "string"
    },
    "credential": {
      "additionalProperties": {},
      "default": {},
      "propertyNames": {
        "type": "string"
      },
      "type": "object"
    },
    "extension_id": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "extension_id",
    "connection_name"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this command does not declare an output schema.

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)