Skip to main content
PUT
Attach a connection to an agent

Authorizations

Authorization
string
header
required

API key obtained from the dashboard or GET /user/api-key

Path Parameters

agentId
string
required
connectionId
string
required

Body

application/json

The grant to write. Two forms:

  • {"access": "full"} — every tool the app supports.
  • {"access": "custom", "allow": [...], "ask": [...]} — named tools only. allow runs freely, ask pauses for human approval, everything unnamed is blocked.

Validation laws on custom: the two lists together must name at least one tool (an all-blocked grant is a detach — use DELETE), and a tool can't appear in both lists. Tool ids come from GET /apps/{provider}/permission-definition.

access
enum<string>
required
Available options:
full

Response

The agent's updated grant set

An agent's full grant set — returned by grant reads and by every grant write.

agentId
string
mode
enum<string>

Always grants on current servers. The all value is wire compatibility with older self-hosted releases — never branch behavior on it.

Available options:
all,
grants
connections
object[]
secrets
object[]