Create a connection grant
Lets a principal use a connection, or the acting user’s own connection at a connector, for the named operations. Access is denied by default; only a grant opens it.
Authorizations
workspace API token (sk_akua_...) or OAuth2 JWT. Create tokens at https://akua.dev/developers/api-tokens
Headers
Optional workspace/scope context for the request. Carries a single workspace wire id (ws_…) today. Only needed for broad tokens - a workspace-owned token implies its workspace.
1 - 53"ws_j572abc123def456"
Optional caller-supplied idempotency key. Any non-empty key up to 64 characters is accepted. Endpoint-specific documentation describes how the key is used.
1 - 64"create-prod-2026-05-07"
Body
One connection, or a connector's connection owned by the acting user, which Connect resolves at request time.
- Option 1
- Option 2
A vault id
^vlt_[^\s/]{1,64}$"vlt_j572abc123def456"
100100none, per_action x >= 0Response
Connection grant created
A connection grant id
^cgr_[^\s/]{1,64}$"cgr_j572abc123def456"
A vault id
^vlt_[^\s/]{1,64}$"vlt_j572abc123def456"
One connection, or a connector's connection owned by the acting user, which Connect resolves at request time.
- Option 1
- Option 2
Catalog operation ids the grant allows. Empty means every reviewed operation.
none, per_action Unix timestamp (seconds) after which the grant stops applying, or null.
x >= 0ACTIVE, REVOKED x >= 1Unix timestamp (seconds)
x >= 0