Information
- OpenAPI version:
3.0.3
Overview
Agent as a Business Runtime API 1.0.0
Section titled “Agent as a Business Runtime API 1.0.0”Runtime API for creating, invoking, publishing, and operating Agent Businesses. Compatibility paths and schemas may retain Application identifiers.
Authentication
Section titled “Authentication”creatorBearerAuth
Section titled “creatorBearerAuth”Creator credential forwarded only to the configured identity verifier. Production Logto uses an access token; a configured Better Auth verifier may also accept Authorization. Public pk_app_ runtime tokens are forbidden.
Security scheme type: http
Bearer format: Logto access token
creatorSessionCookieAuth
Section titled “creatorSessionCookieAuth”Creator Better Auth session cookie forwarded to the configured session verifier. The canonical non-secure name is better-auth.session_token; HTTPS or customized deployments may use __Secure-better-auth.session_token or another configured cookie name, which the browser sends automatically.
Security scheme type: apiKey
Cookie parameter name: better-auth.session_token
runtimeBearerAuth
Section titled “runtimeBearerAuth”Agent Business-scoped public runtime token.
Security scheme type: http
Bearer format: pk_app_
runtimeApiKeyAuth
Section titled “runtimeApiKeyAuth”Agent Business-scoped public runtime token sent through the compatibility API key header.
Security scheme type: apiKey
Header parameter name: X-API-Key
cookieAuth
Section titled “cookieAuth”Security scheme type: apiKey
Cookie parameter name: sessionid
tokenAuth
Section titled “tokenAuth”Token-based authentication with required prefix “Token”
Security scheme type: apiKey
Header parameter name: Authorization