services.devDocs

Credentials

The running jobjob_7Hq2 · delivered · document.fr-CA.pdf · $49.00 charged

Every credential that can call a brand: who holds it, its prefix, the surfaces it reaches and each operation it can call.

9 credentials, 6 live. Only a credential that is a person approves or signs: a key or a tool never can. Each operation's own row names who may call it, in Operations.

CredentialPrefixHeld byCanReachesA personPresented as
secret key, test modesk_test_a buyerorder, read, accept, send back, cancel, end, watch, and run test clocksAPI, CLI, MCP, SDKnobearer
secret keysk_live_a buyerorder, read, accept, send back, cancel, end, watchAPI, CLI, MCP, SDKnobearer
delegated keydlg_an agent a party delegated, scoped by Service and timeorder within its cap; complete answer and upload asks; read that party's jobsAPI, MCP, SDKnobearer
party linkan ask's urlthe named party, with no accountcomplete that one ask, onceAPIyeslink
member sessionms_ sessiona member, in the delivery portal or the member CLIevery member act: join, set availability, keep their conflicts ledger, read their feed, claim, clear and do a TaskAPI, CLIyessession
tenant keytk_an integrator, with On-Behalf-Oforder for its customer; read with consentAPI, SDKnobearer
owner session—the owner and staff rolesthe console, staff actsAPI, CLIyessession
verifier tokenvt_a Pool's or the brand's verifierwrite verified factsAPInobearer
webhook secretwhsec_a watchverify deliveriesSDKnosignature

What each can call

CredentialCallsOperations it can call
secret key, test mode37service.order, job.get, job.wait, job.list, job.accept, job.send_back, job.cancel, job.end, job.again, job.policy, job.signal, job.message, job.thread, job.record, subject.list, subject.get, clock.list, clock.get, clock.ack, clock.satisfy, clock.choose, subscription.list, subscription.get, subscription.cancel, ask.reissue, job.files.list, job.files.put, job.files.get, test_clock.create, test_clock.advance, event.list, event.stream, watch.create, watch.list, watch.delete, watch.replay, event.inbound
secret key35service.order, job.get, job.wait, job.list, job.accept, job.send_back, job.cancel, job.end, job.again, job.policy, job.signal, job.message, job.thread, job.record, subject.list, subject.get, clock.list, clock.get, clock.ack, clock.satisfy, clock.choose, subscription.list, subscription.get, subscription.cancel, ask.reissue, job.files.list, job.files.put, job.files.get, event.list, event.stream, watch.create, watch.list, watch.delete, watch.replay, event.inbound
delegated key31service.order, job.get, job.wait, job.list, job.accept, job.send_back, job.cancel, job.end, job.again, job.policy, job.signal, job.message, job.thread, job.record, subject.list, subject.get, clock.list, clock.get, clock.ack, clock.satisfy, clock.choose, subscription.list, subscription.get, subscription.cancel, ask.reissue, job.files.list, job.files.put, job.files.get, event.list, event.stream, event.inbound
party link4ask.get, ask.complete, ask.revoke, key.raise
member session32job.send_back, job.approve, member.join, member.availability, member.ledger.get, member.ledger.add, member.ledger.checks, member.missed, member.earnings, member.track, task.list, task.get, task.sheet, task.pass, task.claim, task.clear, task.packet, task.release, task.attest, task.send_back, task.decline, task.recuse, task.extend, task.contest, task.message, member.subjects, subject.withdraw, clock.list, clock.get, clock.ack, clock.satisfy, clock.choose
tenant key17service.order, job.get, job.wait, job.list, job.record, subject.list, subject.get, clock.list, clock.get, subscription.list, subscription.get, job.files.list, job.files.put, job.files.get, event.list, event.stream, event.inbound
owner session34job.list, job.send_back, job.end, job.policy, job.record, job.approve, member.join, task.list, task.get, task.offer, task.contest, subject.list, subject.get, clock.list, clock.get, clock.ack, clock.satisfy, clock.choose, clock.assign, subscription.list, subscription.get, subscription.cancel, member.login, ask.get, ask.reissue, job.files.list, job.files.put, job.files.get, receipt.answer, job.export, job.ledger, test_clock.create, test_clock.advance, event.list
verifier token1member.verify
webhook secret0—
anyone, with no credential14service.quote, service.waitlist, service.list, service.get, key.create, brand.home, brand.health, sandbox.fixtures, brand.card, brand.openapi, brand.llms, brand.manifest, brand.pricing, brand.verify