{
"code": "bad_request",
"message": "Missing required field: app_name",
"details": [
{
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
],
"inner_error": {
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
}
{
"code": "bad_request",
"message": "Missing required field: app_name",
"details": [
{
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
],
"inner_error": {
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
}
{
"code": "bad_request",
"message": "Missing required field: app_name",
"details": [
{
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
],
"inner_error": {
"code": "invalid_input",
"message": "Provided version string is not semver compliant"
}
}
Vaults
List vault items without secret values
Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.
{"docsConfig":{"theme":"palm","$schema":"https://mintlify.com/docs.json","name":"Kernel","colors":{"primary":"#212225","light":"#CAB168","dark":"#CAB168"},"logo":{"light":"https://mintcdn.com/tbd-6fc993ce/Lt3m2NlMiCztMtQK/logo/black.svg?fit=max\u0026auto=format\u0026n=Lt3m2NlMiCztMtQK\u0026q=85\u0026s=68e987c751954bbc1d35886a02636c73","dark":"https://mintcdn.com/tbd-6fc993ce/y3CmyOX_b9m5t8tc/logo/white.svg?fit=max\u0026auto=format\u0026n=y3CmyOX_b9m5t8tc\u0026q=85\u0026s=c197f34af93346f9141a9a79870f101e"},"favicon":"https://mintcdn.com/tbd-6fc993ce/G-Oz940pmbilrFx5/favicon.svg?fit=max\u0026auto=format\u0026n=G-Oz940pmbilrFx5\u0026q=85\u0026s=ce38e3ee0e5d07700bccd70f5df08733","appearance":{"default":"light","strict":false},"background":{"color":{"light":"#F0F0F3","dark":"#212225"}},"navbar":{"links":[{"href":"https://dashboard.onkernel.com","label":"Dashboard"},{"href":"https://jobs.ashbyhq.com/usekernel","label":"Careers"}],"primary":{"type":"button","label":"Sign up","href":"https://dashboard.onkernel.com/sign-up"}},"footer":{"socials":{"x":"https://x.com/usekernel","github":"https://github.com/orgs/kernel","linkedin":"https://www.linkedin.com/company/trykernel"}},"seo":{"metatags":{"canonical":"https://www.kernel.sh/docs","og:image":"https://www.kernel.sh/docs/images/og-image.png","twitter:image":"https://www.kernel.sh/docs/images/og-image.png"},"indexing":"all"},"fonts":{"family":"Inter","weight":400},"integrations":{"ga4":{"measurementId":"G-GVEXRLYSN4"}},"contextual":{"options":["copy","chatgpt","claude"],"display":"header"},"styling":{"latex":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"tbd-6fc993ce","hasAudioNarration":false,"actualSubdomain":"tbd-6fc993ce","customDomains":["www.kernel.sh"],"gitSource":{"type":"github","owner":"kernel","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae4301f0c59e275effff739","collectionId":"801f3a20-be5f-438c-ae29-21e630e0c574","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae4301f0c59e275effff739"},"feedback":{"thumbs":false},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6ae4af7e5507c0d0db08bc81","clientVersion":"0.0.4043","searchFilterCounts":[{"language":"default","tag":"API Reference","count":166},{"language":"default","tag":"Guides","count":91},{"language":"default","tag":"How it works","count":68},{"language":"default","tag":"Configure","count":39},{"language":"default","tag":"MCP","count":31},{"language":"default","tag":"Vaults","count":23},{"language":"default","tag":"Managed Auth","count":15},{"language":"default","tag":"Partnering with KERNEL","count":15},{"language":"default","tag":"CLI","count":15},{"language":"default","tag":"Browser Filesystem","count":15}]},"assistantConfig":{},"basePath":"/docs","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":"*{text-transform:lowercase!important}.kernel-brand-name{text-transform:uppercase!important}.code-group code,.code-group pre,[class*=highlight] code,[class*=highlight] pre,code,code *,kbd,pre,pre *{text-transform:none!important}*,::after,::before{border-radius:0!important}:root{--btn-selected-bg:#CAB168;--btn-border:#000}#navigation-items .sidebar-group-header{font-weight:300!important;font-size:11px!important}html.dark #navigation-items .sidebar-group-header{color:rgba(237,238,240,.55)!important}#navigation-items div[class*=mt-]>.sidebar-group-header{margin-top:.75rem;padding-top:1rem;border-top:1px solid rgba(33,34,37,.1)}html.dark #navigation-items div[class*=mt-]>.sidebar-group-header{border-top-color:rgba(237,238,240,.1)}#navigation-items li[data-title]>button.group,#navigation-items li[data-title]>div.group{width:100%!important;flex-direction:row-reverse!important;justify-content:space-between!important}#navigation-items li[data-title]>button.group>svg,#navigation-items li[data-title]>div.group>svg{margin-right:0!important;margin-left:0!important}.prose table,article table,table{width:100%!important;border-collapse:separate!important;border-spacing:0!important;border-radius:0!important;overflow:hidden!important;border:1px solid rgb(var(--gray-950)/.1)!important;background-color:#f9fafb!important;margin:0!important;display:table!important}.prose table thead th,article table thead th,table thead th{padding:10px 16px!important;text-align:left!important;font-weight:600!important;font-size:.875rem!important;line-height:1.5rem!important;background-color:rgba(0,0,0,.02)!important;border-bottom:1px solid rgba(0,0,0,.1)!important;word-wrap:break-word!important;word-break:break-word!important;overflow-wrap:break-word!important;white-space:normal!important;max-width:0!important}.prose table tbody tr,article table tbody tr,table tbody tr{transition:background-color .15s ease!important;border-bottom:1px solid rgba(0,0,0,.06)!important}.prose table tbody tr:last-child,article table tbody tr:last-child,table tbody tr:last-child{border-bottom:none!important}.prose table tbody tr:hover,article table tbody tr:hover,table tbody tr:hover{background-color:rgba(0,0,0,.02)!important}.prose table tbody td,article table tbody td,table tbody td{padding:10px 16px!important;font-size:.875rem!important;line-height:1.5rem!important;word-wrap:break-word!important;word-break:break-word!important;overflow-wrap:break-word!important;white-space:normal!important;max-width:0!important;min-width:130px!important}.prose table code,article table code,table code{font-size:.8125rem!important;padding:2px 6px!important;border-radius:0!important}.prose code:not(pre *),article code:not(pre *),code:not(pre *){padding:1px 4px!important;background-color:transparent!important;border:1px solid #d0d2d9!important}html.dark .prose code:not(pre *),html.dark article code:not(pre *),html.dark code:not(pre *){border-color:rgba(237,238,240,.1)!important}.prose table tbody td:first-child,article table tbody td:first-child,table tbody td:first-child{font-weight:500!important}.tinker-box{display:flex;flex-direction:column;gap:32px;padding:32px;border:1px solid rgba(0,0,0,.12);margin-top:2rem;margin-bottom:2rem}.tinker-box-row{display:flex;align-items:center;gap:32px}.tinker-box-content{display:flex;flex-direction:column;gap:32px;flex:1;min-width:0}.copy-prompt-full button,.tinker-box-content button{width:100%!important;max-width:100%!important}@media (max-width:640px){.tinker-box{padding:24px;gap:24px}.tinker-box-row{flex-direction:column;align-items:stretch;gap:24px;width:100%}.tinker-box-content{width:100%}}html.dark .callout[class*=yellow],html.dark .prose table,html.dark article table,html.dark table{border-color:rgba(237,238,240,.1)!important;background-color:rgba(237,238,240,.02)!important}html.dark .prose table thead th,html.dark article table thead th,html.dark table thead th{background-color:rgba(237,238,240,.04)!important;border-bottom-color:rgba(237,238,240,.1)!important}html.dark .prose table tbody tr,html.dark article table tbody tr,html.dark table tbody tr{border-bottom-color:rgba(237,238,240,.08)!important}html.dark .prose table tbody tr:hover,html.dark article table tbody tr:hover,html.dark table tbody tr:hover{background-color:rgba(237,238,240,.04)!important}html.dark .tinker-box{border-color:rgba(237,238,240,.14)}html.dark{--btn-border:#EDEEF0}html.dark .callout[class*=yellow]{background-color:rgba(237,238,240,.03)!important}html.dark .callout[class*=yellow] svg{color:#cab168!important}.dark .card:hover{border-color:rgb(223 223 223)!important}.dark .link{border-bottom-color:#edeef0}#navigation-items img[src*=\"/images/integration-icons/\"]{width:14px;height:14px;opacity:.68}#navigation-items img[src*=\"/images/integration-icons/nousresearch.svg\"]{opacity:.72;transform:scale(1.06)}#navigation-items img[src*=\"/images/integration-icons/browser-use-logo-transparent.svg\"]{transform:scale(.9)}#navigation-items img[src*=\"/images/integration-icons/computer-cursor-rounded.svg\"]{transform:scale(.95)}#navigation-items img[src*=\"/images/integration-icons/laminar-outline.svg\"]{transform:scale(.9)}#navigation-items img[src*=\"/images/integration-icons/stagehand-logo-transparent.svg\"]{transform:scale(.88)}#navigation-items img[src*=\"/images/integration-icons/stripe.svg\"]{transform:scale(.82)}#navigation-items img[src*=\"/images/integration-icons/vercel.svg\"]{transform:scale(.76)}#navigation-items img[src*=\"/images/integration-icons/1password-logo-transparent.svg\"]{opacity:.6;transform:scale(.82)}#navigation-items li>button:has(img[src*=\"/images/integration-icons/\"])>div:has(>svg){order:1}#navigation-items li>button:has(img[src*=\"/images/integration-icons/\"])>div:has(>img[src*=\"/images/integration-icons/\"]){order:3}#navigation-items li>button:has(img[src*=\"/images/integration-icons/\"])>div:not(:has(>svg)):not(:has(>img[src*=\"/images/integration-icons/\"])){order:2}html.dark #navigation-items img[src*=\"/images/integration-icons/\"]{filter:invert(1)}#pagination a[href^=\"/cookbooks/\"]{display:none}#header .eyebrow[data-parent-group]{font-size:0}#header .eyebrow[data-parent-group]::after{content:attr(data-parent-group);font-size:.875rem}.cookbook-tag{display:block;font-size:.6875rem;font-weight:400;letter-spacing:-.015em;opacity:.72;margin-bottom:.5rem}html.dark .cookbook-tag{color:rgba(237,238,240,.7)}html[data-current-path=\"/\"] #header>div.prose{display:none!important}"}],"page":{"pagePath":"api-reference/vaults/list-vault-items-without-secret-values","slug":"/api-reference/vaults/list-vault-items-without-secret-values","pageMetadata":{"title":"List vault items without secret values","description":"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/items","href":"/api-reference/vaults/list-vault-items-without-secret-values","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"List vault items without secret values","description":"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/items","href":"/api-reference/vaults/list-vault-items-without-secret-values","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/docs/_mintlify/custom/tbd-6fc993ce/ab7a5fd22e95880d/conceptual.js","/docs/_mintlify/custom/tbd-6fc993ce/08c6845006936328/eyebrow.js"],"openApiReferenceData":{"operation":{"description":"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.","operationId":"getVaultItems","responses":{"200":"a08b83d8-a606-4ac6-abc6-603658109c18","401":"50e9bf24-a38c-42d7-b6de-87987660b016","404":"988481b7-6449-4edc-910f-bf02728e010b","500":"25575dfd-750e-40c2-a8aa-5027a0c88b3a"},"security":["4d1683cd-7655-4b41-b8ba-571fde51b806"],"summary":"List vault items without secret values","tags":["Vaults"],"method":"get","type":"path","servers":["334ce7c4-2851-4bdf-a5c8-e2a3ff581b12"],"path":"/vaults/{id_or_name}/items","baseUrlOptions":["https://api.onkernel.com"],"title":"List vault items without secret values","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"bc2bdca6-8a2a-4822-abdc-f90c8193ae9d":{"in":"path","name":"id_or_name","required":true,"schema":{"type":"string","isRequired":true,"uniqueKey":"","typeLabel":"string"}}},"responses":{"a08b83d8-a606-4ac6-abc6-603658109c18":{"content":{"application/json":{"schema":{"items":{"oneOf":[{"type":"object","required":["id","key","type","spec","state","available_operations","available_expansions","created_at","updated_at"],"properties":{"available_expansions":{"items":{"additionalProperties":false,"description":"Live data that can currently be requested by passing its type to the item GET expand parameter.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_expansions.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["payment_methods","link_user_info","link_shipping_addresses"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_expansions.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.available_expansions.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_expansions","typeLabel":"object[]"},"available_operations":{"items":{"additionalProperties":false,"description":"An operation that is currently valid for this item. Read the description before invoking it through the item operations endpoint.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_operations.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["authorize","restart_verification","confirm_transaction","collect","prepare_checkout","fill","arm_passkey","register_passkey","disarm_passkey","1pw_create_access_request","1pw_access_request_status","1pw_fill","1pw_recover","1pw_update_access_token","webmcp_invoke","add_payment_method","remove_payment_method"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_operations.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.available_operations.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.available_operations","typeLabel":"object[]"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.created_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.id","typeLabel":"string"},"key":{"description":"Immutable item key assigned when the item is created.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.key","typeLabel":"string"},"spec":{"oneOf":[{"type":"object","required":["provider","authorization"],"properties":{"authorization":{"additionalProperties":false,"properties":{"client":{"oneOf":[{"type":"object","required":["type"],"properties":{"type":{"enum":["kernel_managed"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.0.type","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.0","typeLabel":"object"},{"type":"object","required":["type","provider_config"],"properties":{"provider_config":{"oneOf":[{"type":"object","description":"Select a provider config by ID or name. Responses return the ID. Renaming a config does not change existing wallet bindings; an item cannot switch to a different config after creation.","required":["id"],"properties":{"id":{"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.0.id","typeLabel":"string"},"name":{"pattern":"^[a-zA-Z0-9._-]{1,255}$","type":"string","uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.0.name","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.0","typeLabel":"object"},{"type":"object","description":"Select a provider config by ID or name. Responses return the ID. Renaming a config does not change existing wallet bindings; an item cannot switch to a different config after creation.","required":["name"],"properties":{"name":{"pattern":"^[a-zA-Z0-9._-]{1,255}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.1.name","typeLabel":"string"},"id":{"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.1.id","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config.oneOf.1","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.provider_config","typeLabel":"object"},"type":{"enum":["customer_managed"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1.type","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client.oneOf.1","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.client","typeLabel":"object"},"method":{"enum":["oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization.method","typeLabel":"enum\u003cstring>"}},"required":["method","client"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.authorization","typeLabel":"object"},"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0.provider","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.0","typeLabel":"object"},{"type":"object","description":"AgentCard wallet. Omit provider_config to use Kernel-managed credentials, or select a customer-owned configuration. Mode (sandbox vs live) is determined by the selected credential; there is no per-item test flag. Without user_id, creation returns a hosted enrollment action and Kernel polls until the user connects. With a customer-owned provider_config, user_id imports an existing connection after verifying access with the selected credentials in their sandbox or live mode; no hosted enrollment is needed, even if the connected user has no stored cards. With Kernel-managed credentials, user_id may only reference a user already enrolled by a wallet in this organization under the same configuration. The user and configuration bindings cannot be changed after creation. Import validation is read-only and runs before creation: a failed validation leaves no wallet or reserved key, so the user_id can be corrected and retried. Concurrent imports of the same key may both validate, but create at most one wallet and connected event.","required":["provider"],"properties":{"provider":{"enum":["agentcard"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"provider_config":{"oneOf":[{"type":"object","description":"Select an AgentCard configuration. The wallet's configuration cannot be changed after creation.","required":["id"],"properties":{"id":{"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.0.id","typeLabel":"string"},"name":{"pattern":"^[a-zA-Z0-9._-]{1,255}$","type":"string","uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.0.name","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.0","typeLabel":"object"},{"type":"object","description":"Select an AgentCard configuration. The wallet's configuration cannot be changed after creation.","required":["name"],"properties":{"name":{"pattern":"^[a-zA-Z0-9._-]{1,255}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.1.name","typeLabel":"string"},"id":{"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.1.id","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config.oneOf.1","typeLabel":"object"}],"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.provider_config","typeLabel":"object"},"user_id":{"pattern":"^usr_[A-Za-z0-9_]+$","type":"string","uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1.user_id","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.1","typeLabel":"object"},{"type":"object","description":"Cards stored with Kernel-managed credentials, each a payment method of the wallet. Each card is enrolled through a card_enrollment action: the cardholder enters the card and their email on a Kernel-hosted page. Where the wallet advertises add_payment_method, creation returns an empty connected wallet and each card is enrolled with that operation. Otherwise creation returns the wallet's default card's card_enrollment action, and the wallet connects once that card is stored. Kernel then enrolls each card for an agentic network token when the issuer supports it. The card number never reaches Kernel. The connected wallet's payment_methods expansion lists the cards; capabilities.single_use_card.eligible is false, with a network_token_* reason, until the card has a network token, and authorize returns 400 for such a card unless Kernel supports checkout delivery without a network token for that card. In that case, fill types the checkout details. Visa purchases require the cardholder to complete a spend_approval action before Kernel issues a one-time code; Mastercard purchases need no hosted approval.","required":["provider"],"properties":{"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.2.provider","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.2","typeLabel":"object"},{"type":"object","description":"Shop Pay wallet connected through Kernel's Shop app. Creation returns a shop_pay_oauth action: the shopper signs in to Shop and approves the connection, and the wallet connects. The connected wallet's payment_methods expansion lists the shopper's saved Shop Pay cards.","required":["provider","authorization"],"properties":{"authorization":{"additionalProperties":false,"properties":{"client":{"additionalProperties":false,"properties":{"type":{"enum":["kernel_managed"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3.authorization.client.type","typeLabel":"enum\u003cstring>"}},"required":["type"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3.authorization.client","typeLabel":"object"},"method":{"enum":["oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3.authorization.method","typeLabel":"enum\u003cstring>"}},"required":["method","client"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3.authorization","typeLabel":"object"},"provider":{"enum":["shop_pay"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3.provider","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec.oneOf.3","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.spec","typeLabel":"object"},"state":{"oneOf":[{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"status":{"enum":["pending_authorization","connected","declined","reconnect_required","degraded"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.0.status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.0.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.0","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["agentcard"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"status":{"enum":["pending_authorization","connected","degraded"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.1.status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.1.status_reason","typeLabel":"string"},"user_id":{"description":"AgentCard user id linked to this wallet. Present once connected.","type":"string","uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.1.user_id","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.1","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.2.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"connected means the wallet is usable. It holds zero or more cards as payment methods, listed by the payment_methods expansion, and each can pay once it reports capabilities.single_use_card.eligible. A wallet with no cards, before its first card or after its last is removed, is still connected. Where the wallet advertises add_payment_method and remove_payment_method, use them to manage cards. Otherwise the wallet enrolls one default card when created; until that card is enrolled the wallet reports pending_authorization with the card's card_enrollment action, or degraded when the card's enrollment outcome is unknown and the wallet must be deleted before adding another card. reconnect_required appears only on a wallet created before cards were payment methods and not yet upgraded. Reads preserve its stored state until the operator upgrade; payment and deletion requests are refused until then.","enum":["pending_authorization","connected","reconnect_required","degraded"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.2.status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.2.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.2","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["shop_pay"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.3.provider","typeLabel":"enum\u003cstring>"},"status":{"enum":["pending_authorization","connected","declined","reconnect_required","degraded"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.3.status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.3.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state.oneOf.3","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.state","typeLabel":"object"},"type":{"enum":["wallet"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.type","typeLabel":"enum\u003cstring>"},"updated_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.updated_at","typeLabel":"string\u003cdate-time>"},"action":{"oneOf":[{"type":"object","required":["name","url"],"properties":{"name":{"enum":["link_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.0.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.0.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.0","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["shop_pay_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.1.name","typeLabel":"enum\u003cstring>"},"url":{"description":"Shop sign-in page where the shopper connects their Shop account to Kernel.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.1.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.1","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["1password_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.2.name","typeLabel":"enum\u003cstring>"},"url":{"description":"1Password-hosted OAuth authorization URL for the human to open.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.2.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.2","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["spend_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.3.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.3.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.3","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["push_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.4.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.4","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["collect"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.5.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.5","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["mfa"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.6.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.6","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["embedded_ceremony"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.7.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.7","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["card_enrollment"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.8.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.8.url","typeLabel":"string\u003curi>"},"capture_token":{"description":"Secret bearer capability for embedded card capture with @onkernel/vault-react. Present only for Kernel wallets; never for AgentCard. Treat it like the enrollment URL and do not log or persist it in browser storage.","type":"string","uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.8.capture_token","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0.action.oneOf.8","typeLabel":"object"}],"uniqueKey":"items.[INDEX].oneOf.0.action","typeLabel":"object"},"description":{"description":"Server-generated provider and lifecycle guidance for agents.","readOnly":true,"type":"string","uniqueKey":"items.[INDEX].oneOf.0.description","typeLabel":"string"},"expanded":{"additionalProperties":false,"description":"Live, non-persisted data requested through the item GET expand parameter.","properties":{"link_shipping_addresses":{"description":"Link's saved shipping addresses, present when the `link_shipping_addresses` expansion is requested.","items":{"additionalProperties":false,"description":"One entry of Link's `GET /shipping_addresses` response, passed through as Link reports it. Kernel never stores it.","properties":{"id":{"description":"Link shipping address ID.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].id","typeLabel":"string"},"is_default":{"type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].is_default","typeLabel":"boolean"},"nickname":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].nickname.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].nickname.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].nickname","typeLabel":"string | null"},"address":{"additionalProperties":false,"description":"Link's nullable postal address fields. Omitted from the shipping address when Link reports null.","properties":{"administrative_area":{"oneOf":[{"description":"State, province or region.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.administrative_area.oneOf.0","typeLabel":"string"},{"description":"State, province or region.","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.administrative_area.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.administrative_area","typeLabel":"string | null"},"country_code":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.country_code.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.country_code.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.country_code","typeLabel":"string | null"},"dependent_locality":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.dependent_locality.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.dependent_locality.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.dependent_locality","typeLabel":"string | null"},"line_1":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_1.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_1.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_1","typeLabel":"string | null"},"line_2":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_2.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_2.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.line_2","typeLabel":"string | null"},"locality":{"oneOf":[{"description":"City or town.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.locality.oneOf.0","typeLabel":"string"},{"description":"City or town.","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.locality.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.locality","typeLabel":"string | null"},"name":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.name.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.name.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.name","typeLabel":"string | null"},"postal_code":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.postal_code.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.postal_code.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.postal_code","typeLabel":"string | null"},"sorting_code":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.sorting_code.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.sorting_code.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address.sorting_code","typeLabel":"string | null"}},"required":["name","line_1","line_2","locality","dependent_locality","administrative_area","postal_code","sorting_code","country_code"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX].address","typeLabel":"object"}},"required":["id","is_default","nickname"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_shipping_addresses","typeLabel":"object[]"},"link_user_info":{"additionalProperties":false,"description":"Link's `GET /userinfo` response for the connected wallet, passed through as Link reports it when the `link_user_info` expansion is requested. Kernel never stores it. Null fields are null at Link; omitted fields were not reported. Amounts are in the minor unit of `default_spend_request_currency`.","properties":{"email":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.email.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.email.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.email","typeLabel":"string | null"},"first_name":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.first_name.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.first_name.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.first_name","typeLabel":"string | null"},"id":{"oneOf":[{"description":"Stable Link user ID.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.id.oneOf.0","typeLabel":"string"},{"description":"Stable Link user ID.","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.id.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.id","typeLabel":"string | null"},"last_name":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.last_name.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.last_name.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.last_name","typeLabel":"string | null"},"name":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.name.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.name.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.name","typeLabel":"string | null"},"phone":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.phone.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.phone.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.phone","typeLabel":"string | null"},"address":{"additionalProperties":false,"description":"The Link user's postal address. Omitted when Link reports none.","properties":{"city":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.city.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.city.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.city","typeLabel":"string | null"},"country":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.country.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.country.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.country","typeLabel":"string | null"},"line1":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line1.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line1.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line1","typeLabel":"string | null"},"line2":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line2.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line2.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.line2","typeLabel":"string | null"},"postal_code":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.postal_code.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.postal_code.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.postal_code","typeLabel":"string | null"},"state":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.state.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.state.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address.state","typeLabel":"string | null"}},"required":["line1","line2","city","state","postal_code","country"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.address","typeLabel":"object"},"agent_wallet_spend_limits":{"additionalProperties":false,"description":"Link's agent wallet spend limits, per transaction and over rolling periods.","properties":{"daily":{"additionalProperties":false,"properties":{"limit":{"oneOf":[{"description":"Null means unlimited.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.limit.oneOf.0","typeLabel":"integer\u003cint64>"},{"description":"Null means unlimited.","format":"int64","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.limit.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.limit","typeLabel":"integer\u003cint64> | null"},"remaining":{"oneOf":[{"description":"Amount still available in the rolling period; null means unlimited.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.remaining.oneOf.0","typeLabel":"integer\u003cint64>"},{"description":"Amount still available in the rolling period; null means unlimited.","format":"int64","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.remaining.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.remaining","typeLabel":"integer\u003cint64> | null"},"used":{"description":"Amount already spent in the rolling period.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily.used","typeLabel":"integer\u003cint64>"}},"required":["limit","used","remaining"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.daily","typeLabel":"object"},"per_transaction":{"additionalProperties":false,"properties":{"limit":{"oneOf":[{"description":"Null means unlimited.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.per_transaction.limit.oneOf.0","typeLabel":"integer\u003cint64>"},{"description":"Null means unlimited.","format":"int64","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.per_transaction.limit.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.per_transaction.limit","typeLabel":"integer\u003cint64> | null"}},"required":["limit"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.per_transaction","typeLabel":"object"},"thirty_day":{"additionalProperties":false,"properties":{"limit":{"oneOf":[{"description":"Null means unlimited.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.limit.oneOf.0","typeLabel":"integer\u003cint64>"},{"description":"Null means unlimited.","format":"int64","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.limit.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.limit","typeLabel":"integer\u003cint64> | null"},"remaining":{"oneOf":[{"description":"Amount still available in the rolling period; null means unlimited.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.remaining.oneOf.0","typeLabel":"integer\u003cint64>"},{"description":"Amount still available in the rolling period; null means unlimited.","format":"int64","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.remaining.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.remaining","typeLabel":"integer\u003cint64> | null"},"used":{"description":"Amount already spent in the rolling period.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day.used","typeLabel":"integer\u003cint64>"}},"required":["limit","used","remaining"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits.thirty_day","typeLabel":"object"}},"required":["per_transaction","daily","thirty_day"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_spend_limits","typeLabel":"object"},"agent_wallet_step_up":{"additionalProperties":false,"description":"Verification Link requires from the user before the agent wallet can spend.","properties":{"action_url":{"oneOf":[{"description":"URL where the user completes verification; null when no action is available.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_step_up.action_url.oneOf.0","typeLabel":"string"},{"description":"URL where the user completes verification; null when no action is available.","type":"null","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_step_up.action_url.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_step_up.action_url","typeLabel":"string | null"},"status":{"description":"Link status such as not_required, ssn_verification, identity_verification, contact_support or complete.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_step_up.status","typeLabel":"string"}},"required":["status","action_url"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.agent_wallet_step_up","typeLabel":"object"},"default_spend_request_currency":{"description":"Lowercase ISO currency Link applies to a spend request created without one.","type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.default_spend_request_currency","typeLabel":"string"},"eligible_for_balance":{"description":"Whether the user can fund purchases from a Link balance.","type":"boolean","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info.eligible_for_balance","typeLabel":"boolean"}},"required":["id","email","name","first_name","last_name","phone"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.link_user_info","typeLabel":"object"},"payment_methods":{"items":{"additionalProperties":false,"properties":{"capabilities":{"additionalProperties":false,"description":"Provider-reported advisory capabilities. A missing capability is unknown, not ineligible; only eligible=false is an explicit negative signal.","properties":{"single_use_card":{"additionalProperties":false,"properties":{"eligible":{"type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].capabilities.single_use_card.eligible","typeLabel":"boolean"},"reasons":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].capabilities.single_use_card.reasons.items.[INDEX]","typeLabel":"string"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].capabilities.single_use_card.reasons","typeLabel":"string[]"}},"required":["eligible","reasons"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].capabilities.single_use_card","typeLabel":"object"}},"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].capabilities","typeLabel":"object"},"display":{"additionalProperties":false,"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].display.brand","typeLabel":"string"},"label":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].display.label","typeLabel":"string"},"last4":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].display.last4","typeLabel":"string"}},"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].display","typeLabel":"object"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].id","typeLabel":"string"},"is_default":{"description":"For Kernel wallets, true for the default card, ID card, which a Kernel card item that omits payment_method_id selects. Wallets created with payment methods enabled have no default card.","type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].is_default","typeLabel":"boolean"},"provider":{"description":"Provider that issued this payment-method ID.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].provider","typeLabel":"string"},"type":{"description":"Provider-neutral payment-method type normalized to lowercase.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].type","typeLabel":"string"},"action":{"additionalProperties":false,"properties":{"name":{"enum":["card_enrollment"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].action.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].action.url","typeLabel":"string\u003curi>"},"capture_token":{"description":"Secret bearer capability for embedded card capture with @onkernel/vault-react. Present only for Kernel wallets; never for AgentCard. Treat it like the enrollment URL and do not log or persist it in browser storage.","type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].action.capture_token","typeLabel":"string"}},"required":["name","url"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].action","typeLabel":"object"},"expires_at":{"description":"Expiry of a pending enrollment link.","format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].expires_at","typeLabel":"string\u003cdate-time>"},"status":{"description":"Kernel wallets only. pending_enrollment means a card_enrollment link is open; active means the card is stored and can pay when capabilities.single_use_card.eligible is true; removal_pending means removal started but the provider outcome is unknown, so retry remove_payment_method; recovery_required means either an enrollment outcome is unknown (remove the method), or the stored card cannot be read (contact support; removal is refused with 409). Consult status_reason to distinguish these cases. Absent for other providers.","enum":["pending_enrollment","active","removal_pending","recovery_required"],"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX].status_reason","typeLabel":"string"}},"required":["id","provider","type","is_default","display","capabilities"],"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.0.expanded.payment_methods","typeLabel":"object[]"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.0.expanded","typeLabel":"object"},"expires_at":{"format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.0.expires_at","typeLabel":"string\u003cdate-time>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.0","typeLabel":"object"},{"type":"object","required":["id","key","type","spec","state","available_operations","available_expansions","created_at","updated_at"],"properties":{"available_expansions":{"items":{"additionalProperties":false,"description":"Live data that can currently be requested by passing its type to the item GET expand parameter.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_expansions.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["payment_methods","link_user_info","link_shipping_addresses"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_expansions.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.available_expansions.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_expansions","typeLabel":"object[]"},"available_operations":{"items":{"additionalProperties":false,"description":"An operation that is currently valid for this item. Read the description before invoking it through the item operations endpoint.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_operations.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["authorize","restart_verification","confirm_transaction","collect","prepare_checkout","fill","arm_passkey","register_passkey","disarm_passkey","1pw_create_access_request","1pw_access_request_status","1pw_fill","1pw_recover","1pw_update_access_token","webmcp_invoke","add_payment_method","remove_payment_method"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_operations.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.available_operations.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.available_operations","typeLabel":"object[]"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.created_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.id","typeLabel":"string"},"key":{"description":"Immutable item key assigned when the item is created.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.key","typeLabel":"string"},"spec":{"oneOf":[{"type":"object","description":"Live Link card request. Test-mode card creation is not supported. The spec can be changed with PATCH until the card is authorized at a checkout. Authorize it with the browser at final checkout: Kernel inspects the checkout through WebMCP and internally chooses a merchant-bound Link Pay Token when supported or a virtual card otherwise. Callers never receive or choose how the credential is delivered.","required":["provider","wallet","payment_method_id","amount","currency","merchant_name","merchant_url","context"],"properties":{"amount":{"description":"Integer amount in minor currency units, at most 50000. With recurring, the spending limit per period, not a lifetime total.","maximum":50000,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.amount","typeLabel":"integer"},"context":{"minLength":100,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.context","typeLabel":"string"},"currency":{"maxLength":3,"minLength":3,"pattern":"^[A-Za-z]{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.currency","typeLabel":"string"},"merchant_name":{"maxLength":255,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.merchant_name","typeLabel":"string"},"merchant_url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.merchant_url","typeLabel":"string\u003curi>"},"payment_method_id":{"description":"Payment-method ID returned by the referenced wallet's payment-method listing. The provider decides whether the selected funding method can satisfy the card request.","minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.payment_method_id","typeLabel":"string"},"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"wallet":{"description":"Connected Link wallet item key.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.wallet","typeLabel":"string"},"line_items":{"items":{"additionalProperties":false,"properties":{"name":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].name","typeLabel":"string"},"description":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].description","typeLabel":"string"},"image_url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].image_url","typeLabel":"string"},"product_url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].product_url","typeLabel":"string"},"quantity":{"minimum":1,"type":"integer","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].quantity","typeLabel":"integer"},"sku":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].sku","typeLabel":"string"},"totals":{"items":{"additionalProperties":false,"properties":{"amount":{"description":"Total amount in minor currency units.","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].amount","typeLabel":"integer"},"display_text":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].display_text","typeLabel":"string"},"type":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].type","typeLabel":"string"}},"required":["type","display_text","amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].totals","typeLabel":"object[]"},"unit_amount":{"description":"Unit amount in minor currency units.","type":"integer","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].unit_amount","typeLabel":"integer"},"url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX].url","typeLabel":"string"}},"required":["name"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.line_items","typeLabel":"object[]"},"metadata":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.metadata.additionalProperties","typeLabel":"string"},"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.metadata","typeLabel":"object"},"recurring":{"additionalProperties":false,"description":"Recurring terms for a subscription or other repeated purchase. The amount becomes the spending limit for each period of interval_count intervals, for example every 2 weeks. The merchant schedules charges. The card stays ready after each charge until it expires or is deleted; do not create a new card each period. Deleting the card, its wallet or its vault first cancels the credential with Link, so later charges decline; if Link cannot be reached, deletion returns 409 provider_revocation_pending and should be retried. Deletion does not cancel the subscription with the merchant. Recurring terms cannot be changed once the card is authorized.","properties":{"interval":{"enum":["day","week","month","year"],"type":"string","x-enum-varnames":["LinkRecurringIntervalDay","LinkRecurringIntervalWeek","LinkRecurringIntervalMonth","LinkRecurringIntervalYear"],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.recurring.interval","typeLabel":"enum\u003cstring>"},"interval_count":{"description":"Number of intervals per period. Link defaults it to 1.","minimum":1,"type":"integer","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.recurring.interval_count","typeLabel":"integer"}},"required":["interval"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.recurring","typeLabel":"object"},"totals":{"items":{"additionalProperties":false,"properties":{"amount":{"description":"Total amount in minor currency units.","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.totals.items.[INDEX].amount","typeLabel":"integer"},"display_text":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.totals.items.[INDEX].display_text","typeLabel":"string"},"type":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.totals.items.[INDEX].type","typeLabel":"string"}},"required":["type","display_text","amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.totals.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0.totals","typeLabel":"object[]"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.0","typeLabel":"object"},{"type":"object","description":"AgentCard reusable live payment card. Test-mode card creation is not supported. Each checkout creates an authorization for spec.merchant / spec.amount that the cardholder approves, unless AgentCard runs it under one of the cardholder's autopilot rules. The card stays ready after each authorization.","required":["provider","wallet","merchant","amount","currency"],"properties":{"amount":{"description":"Integer amount in minor currency units.","format":"int64","maximum":9007199254740991,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.amount","typeLabel":"integer\u003cint64>"},"currency":{"maxLength":3,"minLength":3,"pattern":"^[A-Za-z]{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.currency","typeLabel":"string"},"merchant":{"description":"Merchant name shown on the cardholder's approval screen.","maxLength":120,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.merchant","typeLabel":"string"},"provider":{"enum":["agentcard"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"wallet":{"description":"Wallet item key used to authorize checkouts.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.wallet","typeLabel":"string"},"card_id":{"description":"Opaque card ID returned by AgentCard for a card in the connected wallet. Pass it through unchanged without assuming a prefix or format. Omitted, the cardholder picks on the approval screen.","maxLength":256,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.card_id","typeLabel":"string"},"checkout_origin":{"description":"Origin of the top-level checkout page, such as https://shop.example.com: https, a lowercase host, a port only when it is not 443, and no path. http is accepted only for localhost test pages. Checkouts without a preparation send it to AgentCard, which uses it to match the cardholder's autopilot rules; prepared checkouts send the preparation's merchant_origin instead. Kernel sends the declared value and does not compare it with the page the browser has open. Omitted, those checkouts ask the cardholder to approve. Card updates replace the whole spec, so an update that omits it removes it.","minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1.checkout_origin","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.1","typeLabel":"object"},{"type":"object","description":"One live purchase with a Kernel-enrolled card. Authorization obtains an agentic network token number, expiry and one-time 3-digit code. They are stored encrypted for the fill operation, which types them only on merchant_url's origin; the merchant's own checkout submits the payment. The one-time code is valid until the item's expires_at; fill and submit checkout before then. Mastercard purchases need no cardholder approval. A Visa purchase returns a spend_approval action: the cardholder approves it with a Visa passkey, and Kernel registers a Visa intent for one transaction up to the amount before issuing the code. For supported cards whose network cannot be enrolled for agentic tokens, authorize returns pending_authorization with a spend_approval action to collect a fresh security code in a hosted field. Once collected, the card is ready and can be filled before its expires_at, by default five minutes after collection. An expired card requires a new purchase. Fill types those details on merchant_url's origin. The amount, merchant_url and merchant_country are recorded but do not restrict payment requests sent by the browser. Card updates are not supported; delete and create a new item instead.","required":["provider","wallet","amount","currency","merchant_name","merchant_url"],"properties":{"amount":{"description":"Integer amount in minor currency units (at most 1000000), bound to the one-time code.","format":"int64","maximum":1000000,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.amount","typeLabel":"integer\u003cint64>"},"currency":{"description":"ISO 4217 code. Supported: aud, brl, cad, chf, czk, dkk, eur, gbp, hkd, inr, jpy, krw, mxn, nok, nzd, pln, sek, sgd, usd, zar.","maxLength":3,"minLength":3,"pattern":"^[A-Za-z]{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.currency","typeLabel":"string"},"merchant_name":{"maxLength":255,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.merchant_name","typeLabel":"string"},"merchant_url":{"description":"Merchant checkout URL. Fill is allowed only on this URL's origin.","format":"uri","pattern":"^https://","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.merchant_url","typeLabel":"string\u003curi>"},"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.provider","typeLabel":"enum\u003cstring>"},"wallet":{"description":"Key of the Kernel wallet item whose enrolled card pays.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.wallet","typeLabel":"string"},"merchant_category":{"description":"Actual merchant category when known. Omit rather than invent a category.","maxLength":255,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.merchant_category","typeLabel":"string"},"merchant_category_code":{"description":"Actual merchant MCC when known. Omit rather than invent a code. 0000 is not accepted.","pattern":"^[0-9]{4}$","type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.merchant_category_code","typeLabel":"string"},"merchant_country":{"description":"The merchant's ISO 3166-1 alpha-2 country code. Required for Visa cards, whose one-time code is issued for the merchant's country.","maxLength":2,"minLength":2,"pattern":"^[A-Za-z]{2}$","type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.merchant_country","typeLabel":"string"},"payment_method_id":{"description":"Wallet-scoped payment method ID from the wallet's payment_methods expansion. Omission selects the wallet's default card, ID card, for compatibility with existing requests; it never falls back to another method, and a wallet without a default card requires the ID. The purchase is bound to the method's enrolled card and network token, so later operations cannot switch funding.","maxLength":128,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2.payment_method_id","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.2","typeLabel":"object"},{"type":"object","description":"Shop Pay purchase. amount is the limit the shopper approves; totals must include exactly one positive total no higher than it. context is shown to the shopper when they approve. Authorize it with the browser at final checkout: Kernel sends that page to Shop as the merchant and the card fills only on its origin. Without browser_id and page_url it authorizes for merchant_url. authorize returns an approval action for the shopper, who approves the purchase in Shop; share its URL unchanged when present. Report the merchant outcome with confirm_transaction, which ends the card.","required":["provider","wallet","amount","currency","merchant_name","merchant_url","context","totals"],"properties":{"amount":{"description":"Approval limit in minor currency units, at most 1000000.","format":"int64","maximum":1000000,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.amount","typeLabel":"integer\u003cint64>"},"context":{"description":"What is being bought and why, written for the shopper.","maxLength":500,"minLength":100,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.context","typeLabel":"string"},"currency":{"description":"Shop accepts USD spend requests only.","pattern":"^[Uu][Ss][Dd]$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.currency","typeLabel":"string"},"merchant_name":{"maxLength":255,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.merchant_name","typeLabel":"string"},"merchant_url":{"description":"The merchant's https URL.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.merchant_url","typeLabel":"string\u003curi>"},"provider":{"enum":["shop_pay"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.provider","typeLabel":"enum\u003cstring>"},"totals":{"items":{"additionalProperties":false,"properties":{"amount":{"description":"Amount in minor currency units; discounts are negative.","format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.totals.items.[INDEX].amount","typeLabel":"integer\u003cint64>"},"type":{"description":"For example subtotal, fulfillment, tax, discount or total.","minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.totals.items.[INDEX].type","typeLabel":"string"}},"required":["type","amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.totals.items.[INDEX]","typeLabel":"object"},"minItems":1,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.totals","typeLabel":"object[]"},"wallet":{"description":"Connected Shop Pay wallet item key.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.wallet","typeLabel":"string"},"line_items":{"items":{"additionalProperties":false,"properties":{"name":{"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.line_items.items.[INDEX].name","typeLabel":"string"},"quantity":{"format":"int64","minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.line_items.items.[INDEX].quantity","typeLabel":"integer\u003cint64>"},"unit_amount":{"description":"Unit price in minor currency units.","format":"int64","minimum":0,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.line_items.items.[INDEX].unit_amount","typeLabel":"integer\u003cint64>"}},"required":["name","quantity","unit_amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.line_items.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.line_items","typeLabel":"object[]"},"merchant_country":{"description":"ISO 3166-1 alpha-2 country of the merchant.","pattern":"^[A-Za-z]{2}$","type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.merchant_country","typeLabel":"string"},"payment_method_id":{"description":"Card ID from the wallet's payment_methods expansion. Omit it to use the shopper's preferred card.","minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3.payment_method_id","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec.oneOf.3","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.spec","typeLabel":"object"},"state":{"oneOf":[{"type":"object","description":"Issued Link cards retain encrypted card material for the fill operation. Link cards do not expose aliases or support egress substitution.","required":["provider","status"],"properties":{"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"recovery_required means an original provider operation has an unresolved outcome and the card cannot be used. Reads keep observing a known provider request and may clear the recovery. To continue, delete this card and create a new one; deleting cancels the original request when its ID is known and keeps the recovery evidence. The user may see an approval request for the original card and should approve only the new one.","enum":["requested","pending_authorization","ready","consumed","expired","declined","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.status","typeLabel":"enum\u003cstring>"},"domains":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.domains.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.domains","typeLabel":"string[]"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.masks","typeLabel":"object"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.0","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["agentcard"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"ready_to_submit is device readiness for at most 30 seconds. consumed means the prepared attempt has settled, not that an order succeeded. stopped cannot be reused. outcome_unknown requires merchant reconciliation and blocks new requests. recovery_required means the original checkout outcome is unresolved. Automatic reuse is blocked. Known authorization IDs must be reconciled through provider observations or support. When no authorization ID was returned, an explicitly confirmed item deletion may abandon the unresolved attempt so the caller can create a replacement; deletion does not prove that the original attempt failed. It does not mean declined or expired.","enum":["requested","ready","preparing","ready_to_submit","pending_approval","consumed","stopped","outcome_unknown","degraded","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.status","typeLabel":"enum\u003cstring>"},"aliases":{"additionalProperties":false,"properties":{"cvc":{"pattern":"^\\d{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.aliases.cvc","typeLabel":"string"},"exp_month":{"pattern":"^\\d{2}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.aliases.exp_month","typeLabel":"string"},"exp_year":{"pattern":"^\\d{4}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.aliases.exp_year","typeLabel":"string"},"number":{"pattern":"^\\d{16}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.aliases.number","typeLabel":"string"}},"readOnly":true,"required":["number","cvc","exp_month","exp_year"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.aliases","typeLabel":"object"},"authorization":{"additionalProperties":false,"description":"The in-flight or most recent checkout authorization. Present while a checkout is pending approval and after it settles.","properties":{"amount_cents":{"format":"int64","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.amount_cents","typeLabel":"integer\u003cint64>"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.created_at","typeLabel":"string\u003cdate-time>"},"currency":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.currency","typeLabel":"string"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.id","typeLabel":"string"},"merchant":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.merchant","typeLabel":"string"},"psp":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.psp","typeLabel":"string"},"status":{"enum":["awaiting_approval","approved","declined","expired"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.status","typeLabel":"enum\u003cstring>"},"actual_cents":{"format":"int64","type":"integer","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.actual_cents","typeLabel":"integer\u003cint64>"},"amount":{"description":"Display amount shown on the approval screen.","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.amount","typeLabel":"string"},"amount_authority":{"enum":["display_only","stripe_payment_intent"],"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.amount_authority","typeLabel":"enum\u003cstring>"},"amount_verified":{"type":"boolean","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.amount_verified","typeLabel":"boolean"},"approval_url":{"format":"uri","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.approval_url","typeLabel":"string\u003curi>"},"browser_id":{"description":"Browser session that submitted the checkout.","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.browser_id","typeLabel":"string"},"charged_amount_cents":{"format":"int64","type":"integer","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.charged_amount_cents","typeLabel":"integer\u003cint64>"},"charged_currency":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.charged_currency","typeLabel":"string"},"charged_kind":{"enum":["captured","authorized","none"],"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.charged_kind","typeLabel":"enum\u003cstring>"},"expected_cents":{"format":"int64","type":"integer","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.expected_cents","typeLabel":"integer\u003cint64>"},"expires_at":{"format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.expires_at","typeLabel":"string\u003cdate-time>"},"psp_error_code":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.psp_error_code","typeLabel":"string"},"reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.reason","typeLabel":"string"},"replay_attempted":{"type":"boolean","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.replay_attempted","typeLabel":"boolean"},"replay_delivered":{"description":"Whether the processor response was delivered to the browser.","type":"boolean","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.replay_delivered","typeLabel":"boolean"},"replay_status":{"description":"HTTP status of the replayed processor response.","type":"integer","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization.replay_status","typeLabel":"integer"}},"required":["id","status","psp","merchant","amount_cents","currency","created_at"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.authorization","typeLabel":"object"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.masks","typeLabel":"object"},"preparation":{"additionalProperties":false,"description":"One-use processor-bound checkout preparation. Keep the approval page open through device handoff, including Adyen encryption. The amount is declared by the caller and does not constrain the merchant's eventual charge. Adyen device approval and browser Authorised responses are not capture or fulfillment evidence.","properties":{"browser_id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.browser_id","typeLabel":"string"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.created_at","typeLabel":"string\u003cdate-time>"},"environment":{"enum":["production","sandbox","shared"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.environment","typeLabel":"enum\u003cstring>"},"merchant_origin":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.merchant_origin","typeLabel":"string"},"psp":{"enum":["square","braintree","worldpay","bambora","mercado_pago","adyen"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.psp","typeLabel":"enum\u003cstring>"},"status":{"description":"Preparation consumed means egress claimed the preparation and it cannot be reused. It does not mean the attempt settled. Use the enclosing item's status as the lifecycle indicator; item consumed means the attempt settled, not that an order or charge succeeded.","enum":["creating","awaiting_approval","ready","consumed","cancelled","expired","unknown"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.status","typeLabel":"enum\u003cstring>"},"approval_url":{"format":"uri","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.approval_url","typeLabel":"string\u003curi>"},"expires_at":{"description":"When ready, the absolute deadline to submit the first native request; no later than provider readiness expiry or 30 seconds after Kernel first observes readiness. Polling never extends this deadline.","format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.expires_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation.id","typeLabel":"string"}},"required":["status","browser_id","merchant_origin","psp","environment","created_at"],"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.preparation","typeLabel":"object"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.1","typeLabel":"object"},{"type":"object","description":"A ready Kernel card supports authorize, fill, then submit checkout. Card details are delivered for a few minutes after fill; submit promptly. Repeated fill is safe and never submits checkout. Visa purchases require a spend_approval action before details are issued; Mastercard purchases need no hosted approval. masks.last4 is the enrolled card's last four digits; masks.token_last4, when present, is the token's last four digits shown to the merchant. Kernel does not observe whether the merchant charged the card.","required":["provider","status"],"properties":{"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"pending_authorization waits for cardholder approval on Visa purchases or fresh security-code collection on alias-mode purchases through the spend_approval action; an unused link expires after 30 minutes. Alias-mode cards become ready after collection and expire at the temporary security-code alias deadline, by default five minutes later. An expired alias purchase requires a new card. recovery_required means verification, approving the purchase or issuing the one-time code has an unresolved outcome. A server-classified initial attestation failure before intent dispatch may advertise restart_verification to prepare a fresh local verification link; this does not approve spending or replay any provider request. Unclassified legacy recovery and uncertain intent creation cannot restart. Kernel never approves again or issues another code for the item automatically. To continue, delete this card and create a new purchase; the cardholder approves the new purchase separately. Recovery while reporting a merchant transaction cannot be deleted and must be reconciled with support. When status_reason says the provider refused retrieval before acceptance, no code was issued and a later read retries. declined means the card network refused to issue a code.","enum":["requested","pending_authorization","ready","consumed","expired","declined","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.status","typeLabel":"enum\u003cstring>"},"domains":{"description":"Informational registrable domain. Fill is locked to merchant_url's exact origin.","items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.domains.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.domains","typeLabel":"string[]"},"funding_status":{"description":"Whether payment_method_id can still fund this purchase. unavailable means the method is being removed or awaits recovery, so authorization, fill and confirmation are refused until it recovers. removed means the method was removed from its wallet, so this purchase can no longer be paid; create a new purchase with another method. Neither changes status, which still reports what already happened to this purchase.","enum":["available","unavailable","removed"],"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.funding_status","typeLabel":"enum\u003cstring>"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.masks","typeLabel":"object"},"payment_method_id":{"description":"Wallet-scoped ID of the payment method funding this purchase. It is bound when the purchase is created and never changes; purchases created before payment methods could be selected report the wallet's default card, card.","type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.payment_method_id","typeLabel":"string"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.2","typeLabel":"object"},{"type":"object","description":"Issued Shop Pay cards retain encrypted card material for the fill operation.","required":["provider","status"],"properties":{"provider":{"enum":["shop_pay"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"declined covers a request the shopper declined or that was cancelled. consumed means the transaction outcome was reported with confirm_transaction; the card is no longer stored and cannot be filled again, whatever the outcome. recovery_required means a provider operation has an unresolved outcome and the card cannot be used. When status_reason says the provider refused retrieval before acceptance, no card was issued and a later read retries. Otherwise follow status_reason: recovery for issuance can be abandoned by deleting the card and creating a new one, and the shopper approves the new purchase separately. Recovery while reporting a merchant transaction cannot be deleted and must be reconciled with support.","enum":["requested","pending_authorization","ready","consumed","expired","declined","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.status","typeLabel":"enum\u003cstring>"},"domains":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.domains.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.domains","typeLabel":"string[]"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.masks","typeLabel":"object"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state.oneOf.3","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.state","typeLabel":"object"},"type":{"enum":["card"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.type","typeLabel":"enum\u003cstring>"},"updated_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.updated_at","typeLabel":"string\u003cdate-time>"},"action":{"oneOf":[{"type":"object","required":["name","url"],"properties":{"name":{"enum":["link_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.0.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.0.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.0","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["shop_pay_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.1.name","typeLabel":"enum\u003cstring>"},"url":{"description":"Shop sign-in page where the shopper connects their Shop account to Kernel.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.1.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.1","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["1password_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.2.name","typeLabel":"enum\u003cstring>"},"url":{"description":"1Password-hosted OAuth authorization URL for the human to open.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.2.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.2","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["spend_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.3.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.3.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.3","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["push_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.4.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.4","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["collect"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.5.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.5","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["mfa"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.6.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.6","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["embedded_ceremony"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.7.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.7","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["card_enrollment"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.8.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.8.url","typeLabel":"string\u003curi>"},"capture_token":{"description":"Secret bearer capability for embedded card capture with @onkernel/vault-react. Present only for Kernel wallets; never for AgentCard. Treat it like the enrollment URL and do not log or persist it in browser storage.","type":"string","uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.8.capture_token","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1.action.oneOf.8","typeLabel":"object"}],"uniqueKey":"items.[INDEX].oneOf.1.action","typeLabel":"object"},"expires_at":{"format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.1.expires_at","typeLabel":"string\u003cdate-time>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.1","typeLabel":"object"},{"type":"object","description":"One purchase from a Link or Kernel wallet, parented by that wallet. It has the same lifecycle, operations and fill behavior as a Link or Kernel card item. AgentCard reusable cards remain card items.","required":["id","key","type","spec","state","available_operations","available_expansions","created_at","updated_at"],"properties":{"available_expansions":{"items":{"additionalProperties":false,"description":"Live data that can currently be requested by passing its type to the item GET expand parameter.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_expansions.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["payment_methods","link_user_info","link_shipping_addresses"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_expansions.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.available_expansions.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_expansions","typeLabel":"object[]"},"available_operations":{"items":{"additionalProperties":false,"description":"An operation that is currently valid for this item. Read the description before invoking it through the item operations endpoint.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_operations.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["authorize","restart_verification","confirm_transaction","collect","prepare_checkout","fill","arm_passkey","register_passkey","disarm_passkey","1pw_create_access_request","1pw_access_request_status","1pw_fill","1pw_recover","1pw_update_access_token","webmcp_invoke","add_payment_method","remove_payment_method"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_operations.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.available_operations.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.available_operations","typeLabel":"object[]"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.created_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.id","typeLabel":"string"},"key":{"description":"Immutable item key assigned when the item is created.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.key","typeLabel":"string"},"spec":{"oneOf":[{"type":"object","description":"Live Link card request. Test-mode card creation is not supported. The spec can be changed with PATCH until the card is authorized at a checkout. Authorize it with the browser at final checkout: Kernel inspects the checkout through WebMCP and internally chooses a merchant-bound Link Pay Token when supported or a virtual card otherwise. Callers never receive or choose how the credential is delivered.","required":["provider","wallet","payment_method_id","amount","currency","merchant_name","merchant_url","context"],"properties":{"amount":{"description":"Integer amount in minor currency units, at most 50000. With recurring, the spending limit per period, not a lifetime total.","maximum":50000,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.amount","typeLabel":"integer"},"context":{"minLength":100,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.context","typeLabel":"string"},"currency":{"maxLength":3,"minLength":3,"pattern":"^[A-Za-z]{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.currency","typeLabel":"string"},"merchant_name":{"maxLength":255,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.merchant_name","typeLabel":"string"},"merchant_url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.merchant_url","typeLabel":"string\u003curi>"},"payment_method_id":{"description":"Payment-method ID returned by the referenced wallet's payment-method listing. The provider decides whether the selected funding method can satisfy the card request.","minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.payment_method_id","typeLabel":"string"},"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"wallet":{"description":"Connected Link wallet item key.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.wallet","typeLabel":"string"},"line_items":{"items":{"additionalProperties":false,"properties":{"name":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].name","typeLabel":"string"},"description":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].description","typeLabel":"string"},"image_url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].image_url","typeLabel":"string"},"product_url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].product_url","typeLabel":"string"},"quantity":{"minimum":1,"type":"integer","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].quantity","typeLabel":"integer"},"sku":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].sku","typeLabel":"string"},"totals":{"items":{"additionalProperties":false,"properties":{"amount":{"description":"Total amount in minor currency units.","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].amount","typeLabel":"integer"},"display_text":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].display_text","typeLabel":"string"},"type":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX].type","typeLabel":"string"}},"required":["type","display_text","amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].totals.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].totals","typeLabel":"object[]"},"unit_amount":{"description":"Unit amount in minor currency units.","type":"integer","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].unit_amount","typeLabel":"integer"},"url":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX].url","typeLabel":"string"}},"required":["name"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.line_items","typeLabel":"object[]"},"metadata":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.metadata.additionalProperties","typeLabel":"string"},"type":"object","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.metadata","typeLabel":"object"},"recurring":{"additionalProperties":false,"description":"Recurring terms for a subscription or other repeated purchase. The amount becomes the spending limit for each period of interval_count intervals, for example every 2 weeks. The merchant schedules charges. The card stays ready after each charge until it expires or is deleted; do not create a new card each period. Deleting the card, its wallet or its vault first cancels the credential with Link, so later charges decline; if Link cannot be reached, deletion returns 409 provider_revocation_pending and should be retried. Deletion does not cancel the subscription with the merchant. Recurring terms cannot be changed once the card is authorized.","properties":{"interval":{"enum":["day","week","month","year"],"type":"string","x-enum-varnames":["LinkRecurringIntervalDay","LinkRecurringIntervalWeek","LinkRecurringIntervalMonth","LinkRecurringIntervalYear"],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.recurring.interval","typeLabel":"enum\u003cstring>"},"interval_count":{"description":"Number of intervals per period. Link defaults it to 1.","minimum":1,"type":"integer","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.recurring.interval_count","typeLabel":"integer"}},"required":["interval"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.recurring","typeLabel":"object"},"totals":{"items":{"additionalProperties":false,"properties":{"amount":{"description":"Total amount in minor currency units.","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.totals.items.[INDEX].amount","typeLabel":"integer"},"display_text":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.totals.items.[INDEX].display_text","typeLabel":"string"},"type":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.totals.items.[INDEX].type","typeLabel":"string"}},"required":["type","display_text","amount"],"type":"object","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.totals.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0.totals","typeLabel":"object[]"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.0","typeLabel":"object"},{"type":"object","description":"One live purchase funded by the Kernel wallet payment method named by payment_method_id. The method must be active and eligible when the request is created. The purchase is bound to that method; later operations cannot switch funding, and removing the method makes the purchase unusable rather than moving it to another card. Approval, issuance, fill and the alias fallback behave as described for KernelCardVaultItemSpec.","required":["provider","wallet","payment_method_id","amount","currency","merchant_name","merchant_url"],"properties":{"amount":{"description":"Integer amount in minor currency units (at most 1000000), bound to the one-time code.","format":"int64","maximum":1000000,"minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.amount","typeLabel":"integer\u003cint64>"},"currency":{"description":"ISO 4217 code. Supported: aud, brl, cad, chf, czk, dkk, eur, gbp, hkd, inr, jpy, krw, mxn, nok, nzd, pln, sek, sgd, usd, zar.","maxLength":3,"minLength":3,"pattern":"^[A-Za-z]{3}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.currency","typeLabel":"string"},"merchant_name":{"maxLength":255,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.merchant_name","typeLabel":"string"},"merchant_url":{"description":"Merchant checkout URL. Fill is allowed only on this URL's origin.","format":"uri","pattern":"^https://","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.merchant_url","typeLabel":"string\u003curi>"},"payment_method_id":{"description":"Payment method ID from the wallet's payment_methods expansion.","maxLength":128,"minLength":1,"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.payment_method_id","typeLabel":"string"},"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"wallet":{"description":"Key of the Kernel wallet item that owns the payment method.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.wallet","typeLabel":"string"},"merchant_category":{"description":"Actual merchant category when known. Omit rather than invent a category.","maxLength":255,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.merchant_category","typeLabel":"string"},"merchant_category_code":{"description":"Actual merchant MCC when known. Omit rather than invent a code. 0000 is not accepted.","pattern":"^[0-9]{4}$","type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.merchant_category_code","typeLabel":"string"},"merchant_country":{"description":"The merchant's ISO 3166-1 alpha-2 country code. Required for Visa cards, whose one-time code is issued for the merchant's country.","maxLength":2,"minLength":2,"pattern":"^[A-Za-z]{2}$","type":"string","uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1.merchant_country","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec.oneOf.1","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.spec","typeLabel":"object"},"state":{"oneOf":[{"type":"object","description":"Issued Link cards retain encrypted card material for the fill operation. Link cards do not expose aliases or support egress substitution.","required":["provider","status"],"properties":{"provider":{"enum":["link"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"recovery_required means an original provider operation has an unresolved outcome and the card cannot be used. Reads keep observing a known provider request and may clear the recovery. To continue, delete this card and create a new one; deleting cancels the original request when its ID is known and keeps the recovery evidence. The user may see an approval request for the original card and should approve only the new one.","enum":["requested","pending_authorization","ready","consumed","expired","declined","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.status","typeLabel":"enum\u003cstring>"},"domains":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.domains.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.domains","typeLabel":"string[]"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.masks","typeLabel":"object"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.0","typeLabel":"object"},{"type":"object","description":"A ready Kernel card supports authorize, fill, then submit checkout. Card details are delivered for a few minutes after fill; submit promptly. Repeated fill is safe and never submits checkout. Visa purchases require a spend_approval action before details are issued; Mastercard purchases need no hosted approval. masks.last4 is the enrolled card's last four digits; masks.token_last4, when present, is the token's last four digits shown to the merchant. Kernel does not observe whether the merchant charged the card.","required":["provider","status"],"properties":{"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"pending_authorization waits for cardholder approval on Visa purchases or fresh security-code collection on alias-mode purchases through the spend_approval action; an unused link expires after 30 minutes. Alias-mode cards become ready after collection and expire at the temporary security-code alias deadline, by default five minutes later. An expired alias purchase requires a new card. recovery_required means verification, approving the purchase or issuing the one-time code has an unresolved outcome. A server-classified initial attestation failure before intent dispatch may advertise restart_verification to prepare a fresh local verification link; this does not approve spending or replay any provider request. Unclassified legacy recovery and uncertain intent creation cannot restart. Kernel never approves again or issues another code for the item automatically. To continue, delete this card and create a new purchase; the cardholder approves the new purchase separately. Recovery while reporting a merchant transaction cannot be deleted and must be reconciled with support. When status_reason says the provider refused retrieval before acceptance, no code was issued and a later read retries. declined means the card network refused to issue a code.","enum":["requested","pending_authorization","ready","consumed","expired","declined","recovery_required"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.status","typeLabel":"enum\u003cstring>"},"domains":{"description":"Informational registrable domain. Fill is locked to merchant_url's exact origin.","items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.domains.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.domains","typeLabel":"string[]"},"funding_status":{"description":"Whether payment_method_id can still fund this purchase. unavailable means the method is being removed or awaits recovery, so authorization, fill and confirmation are refused until it recovers. removed means the method was removed from its wallet, so this purchase can no longer be paid; create a new purchase with another method. Neither changes status, which still reports what already happened to this purchase.","enum":["available","unavailable","removed"],"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.funding_status","typeLabel":"enum\u003cstring>"},"masks":{"additionalProperties":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.masks.additionalProperties","typeLabel":"string"},"properties":{"brand":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.masks.brand","typeLabel":"string"},"last4":{"maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.masks.last4","typeLabel":"string"},"token_last4":{"description":"Last four digits of the network token presented to the merchant.","maxLength":4,"minLength":4,"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.masks.token_last4","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.masks","typeLabel":"object"},"payment_method_id":{"description":"Wallet-scoped ID of the payment method funding this purchase. It is bound when the purchase is created and never changes; purchases created before payment methods could be selected report the wallet's default card, card.","type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.payment_method_id","typeLabel":"string"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state.oneOf.1","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.state","typeLabel":"object"},"type":{"enum":["payment_request"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.type","typeLabel":"enum\u003cstring>"},"updated_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.updated_at","typeLabel":"string\u003cdate-time>"},"action":{"oneOf":[{"type":"object","required":["name","url"],"properties":{"name":{"enum":["link_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.0.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.0.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.0","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["shop_pay_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.1.name","typeLabel":"enum\u003cstring>"},"url":{"description":"Shop sign-in page where the shopper connects their Shop account to Kernel.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.1.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.1","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["1password_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.2.name","typeLabel":"enum\u003cstring>"},"url":{"description":"1Password-hosted OAuth authorization URL for the human to open.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.2.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.2","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["spend_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.3.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.3.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.3","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["push_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.4.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.4","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["collect"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.5.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.5","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["mfa"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.6.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.6","typeLabel":"object"},{"type":"object","required":["name"],"properties":{"name":{"enum":["embedded_ceremony"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.7.name","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.7","typeLabel":"object"},{"type":"object","required":["name","url"],"properties":{"name":{"enum":["card_enrollment"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.8.name","typeLabel":"enum\u003cstring>"},"url":{"format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.8.url","typeLabel":"string\u003curi>"},"capture_token":{"description":"Secret bearer capability for embedded card capture with @onkernel/vault-react. Present only for Kernel wallets; never for AgentCard. Treat it like the enrollment URL and do not log or persist it in browser storage.","type":"string","uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.8.capture_token","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2.action.oneOf.8","typeLabel":"object"}],"uniqueKey":"items.[INDEX].oneOf.2.action","typeLabel":"object"},"expires_at":{"format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.2.expires_at","typeLabel":"string\u003cdate-time>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.2","typeLabel":"object"},{"type":"object","required":["id","key","type","spec","state","available_operations","available_expansions","created_at","updated_at"],"properties":{"available_expansions":{"items":{"additionalProperties":false,"description":"Live data that can currently be requested by passing its type to the item GET expand parameter.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_expansions.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["payment_methods","link_user_info","link_shipping_addresses"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_expansions.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.3.available_expansions.items.[INDEX]","typeLabel":"object"},"maxItems":0,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_expansions","typeLabel":"object[]"},"available_operations":{"description":"Advertises 1pw_recover when Kernel can recover a failed account link. Recovery is unavailable while authorization is pending or after the connection has already been reset.","items":{"additionalProperties":false,"description":"An operation that is currently valid for this item. Read the description before invoking it through the item operations endpoint.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_operations.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["authorize","restart_verification","confirm_transaction","collect","prepare_checkout","fill","arm_passkey","register_passkey","disarm_passkey","1pw_create_access_request","1pw_access_request_status","1pw_fill","1pw_recover","1pw_update_access_token","webmcp_invoke","add_payment_method","remove_payment_method"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_operations.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.3.available_operations.items.[INDEX]","typeLabel":"object"},"maxItems":1,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.available_operations","typeLabel":"object[]"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.created_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.id","typeLabel":"string"},"key":{"description":"Immutable item key assigned when the item is created.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.key","typeLabel":"string"},"spec":{"additionalProperties":false,"properties":{"authorization":{"additionalProperties":false,"properties":{"client":{"additionalProperties":false,"properties":{"type":{"enum":["kernel_managed"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec.authorization.client.type","typeLabel":"enum\u003cstring>"}},"required":["type"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec.authorization.client","typeLabel":"object"},"method":{"enum":["oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec.authorization.method","typeLabel":"enum\u003cstring>"}},"required":["method","client"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec.authorization","typeLabel":"object"},"provider":{"enum":["1password"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec.provider","typeLabel":"enum\u003cstring>"}},"required":["provider","authorization"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.spec","typeLabel":"object"},"state":{"additionalProperties":false,"properties":{"provider":{"enum":["1password"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.state.provider","typeLabel":"enum\u003cstring>"},"status":{"enum":["pending_authorization","connected","reconnect_required","declined"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.state.status","typeLabel":"enum\u003cstring>"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.3.state.status_reason","typeLabel":"string"}},"required":["provider","status"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.state","typeLabel":"object"},"type":{"enum":["credential_account"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.type","typeLabel":"enum\u003cstring>"},"updated_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.updated_at","typeLabel":"string\u003cdate-time>"},"action":{"additionalProperties":false,"properties":{"name":{"enum":["1password_oauth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.action.name","typeLabel":"enum\u003cstring>"},"url":{"description":"1Password-hosted OAuth authorization URL for the human to open.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.3.action.url","typeLabel":"string\u003curi>"}},"required":["name","url"],"type":"object","uniqueKey":"items.[INDEX].oneOf.3.action","typeLabel":"object"},"expires_at":{"format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.3.expires_at","typeLabel":"string\u003cdate-time>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.3","typeLabel":"object"},{"type":"object","required":["id","key","type","version","spec","state","available_operations","available_expansions","created_at","updated_at"],"properties":{"available_expansions":{"items":{"additionalProperties":false,"description":"Live data that can currently be requested by passing its type to the item GET expand parameter.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_expansions.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["payment_methods","link_user_info","link_shipping_addresses"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_expansions.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.available_expansions.items.[INDEX]","typeLabel":"object"},"maxItems":0,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_expansions","typeLabel":"object[]"},"available_operations":{"description":"Kernel credentials advertise collect and fill when eligible. 1Password credentials advertise 1pw_create_access_request until a request is made, 1pw_access_request_status while its approval is pending, and 1pw_fill after access is granted. Managed auth credentials advertise fill while ready and nothing otherwise.","items":{"additionalProperties":false,"description":"An operation that is currently valid for this item. Read the description before invoking it through the item operations endpoint.","properties":{"description":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_operations.items.[INDEX].description","typeLabel":"string"},"type":{"enum":["authorize","restart_verification","confirm_transaction","collect","prepare_checkout","fill","arm_passkey","register_passkey","disarm_passkey","1pw_create_access_request","1pw_access_request_status","1pw_fill","1pw_recover","1pw_update_access_token","webmcp_invoke","add_payment_method","remove_payment_method"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_operations.items.[INDEX].type","typeLabel":"enum\u003cstring>"}},"required":["type","description"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.available_operations.items.[INDEX]","typeLabel":"object"},"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.available_operations","typeLabel":"object[]"},"created_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.created_at","typeLabel":"string\u003cdate-time>"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.id","typeLabel":"string"},"key":{"description":"Immutable item key assigned when the item is created.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.key","typeLabel":"string"},"spec":{"oneOf":[{"type":"object","required":["provider","fields"],"properties":{"fields":{"description":"Ordered field definitions rendered in this order by credential collection forms.","items":{"additionalProperties":false,"properties":{"name":{"description":"Stable field name used to key values, updates, and browser fills.","pattern":"^[a-zA-Z][a-zA-Z0-9_]{0,63}$","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX].name","typeLabel":"string"},"required":{"description":"Whether a nonempty value is required for readiness and form submission.","type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX].required","typeLabel":"boolean"},"sensitive":{"description":"Whether the value is omitted from every item response. Reserve true for secrets such as passwords, API tokens, and TOTP seeds. Ordinary usernames and email addresses should be false so the form can display and prefill them.","type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX].sensitive","typeLabel":"boolean"},"type":{"description":"Text, email, and password have form inputs; totp and passkey do not and are omitted from\nboth Kernel-hosted and customer React forms. Password, totp, and passkey must be sensitive.\nA totp value is an RFC 4648 Base32 generator seed (case-insensitive, optional\ntrailing padding), not an otpauth URI or current code. Reject invalid or empty\ndecoded seeds. Browser fill generates an RFC 6238 code at execution time using\nHMAC-SHA1, 6 digits, and a 30-second period. Preserve leading zeros; never fill\nthe seed. Custom algorithms, digits, periods, and form enrollment are unsupported.\nA passkey value is a JSON-encoded FIDO Credential Exchange Format passkey object\nwith unpadded base64url `credentialId`, `userHandle` (at most 64 bytes), and `key`\n(a PKCS#8 ECDSA P-256 private key), a lowercase `rpId` domain, and optional\n`username` and `userDisplayName`. Other CXF members are ignored. Passkeys are never\nfilled into pages; use arm_passkey to sign in with one and register_passkey to create one.\n","enum":["text","email","password","totp","passkey"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"label":{"description":"Optional human-readable display label. It is returned as non-secret metadata and never affects value keys, updates, or browser fills. Use single-line, trimmed display text without control or formatting characters. The server enforces a 128-byte UTF-8 limit.","maxLength":128,"minLength":1,"pattern":"^\\S(?:.*\\S)?$","type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX].label","typeLabel":"string"}},"required":["name","type","required","sensitive"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields.items.[INDEX]","typeLabel":"object"},"maxItems":32,"minItems":1,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.fields","typeLabel":"object[]"},"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"description":{"description":"Recognizable site or service name displayed verbatim as the form title, without suffixes such as sign-in credentials. Display text only, not an enforced destination policy.","maxLength":16384,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0.description","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.0","typeLabel":"object"},{"type":"object","description":"Stored-token credentials omit account and never return access_token or integration_key.","required":["provider","requests"],"properties":{"provider":{"enum":["1password"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"requests":{"additionalProperties":false,"description":"Credential Request v2 input sent to the extension. A credential item may request up to five login entries.","properties":{"entries":{"items":{"additionalProperties":false,"properties":{"parameters":{"additionalProperties":false,"properties":{"website":{"format":"uri","maxLength":2083,"pattern":"^https://","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].parameters.website","typeLabel":"string\u003curi>"}},"required":["website"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].parameters","typeLabel":"object"},"type":{"description":"Must be login.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].type","typeLabel":"string"},"id":{"description":"1Password's ID for this entry in an access request you created. Supply it only with resolved.","maxLength":128,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].id","typeLabel":"string"},"keywords":{"items":{"maxLength":50,"minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].keywords.items.[INDEX]","typeLabel":"string"},"maxItems":5,"minItems":1,"type":"array","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].keywords","typeLabel":"string[]"},"reason":{"maxLength":100,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX].reason","typeLabel":"string"}},"required":["type","parameters"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries.items.[INDEX]","typeLabel":"object"},"maxItems":5,"minItems":1,"type":"array","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.entries","typeLabel":"object[]"},"version":{"description":"Must be 2.","type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.version","typeLabel":"integer"},"goal":{"maxLength":140,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests.goal","typeLabel":"string"}},"required":["version","entries"],"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.requests","typeLabel":"object"},"access_token_expires_at":{"description":"Customer-supplied expiry metadata, if provided.","format":"date-time","type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.access_token_expires_at","typeLabel":"string\u003cdate-time>"},"account":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1.account","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.1","typeLabel":"object"},{"type":"object","required":["provider","connection_id"],"properties":{"connection_id":{"description":"ID of the managed auth connection whose saved credential this item reads. List connections with `GET /auth/connections`.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.2.connection_id","typeLabel":"string"},"provider":{"enum":["managed_auth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.2.provider","typeLabel":"enum\u003cstring>"},"description":{"description":"Display text supplied when the item was created. Omitted when none was given.","maxLength":16384,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.2.description","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec.oneOf.2","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.spec","typeLabel":"object"},"state":{"oneOf":[{"type":"object","required":["provider","status","fields"],"properties":{"fields":{"additionalProperties":{"additionalProperties":false,"properties":{"has_value":{"type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.fields.additionalProperties.has_value","typeLabel":"boolean"},"value":{"description":"Present exactly when has_value is true and the field is not sensitive. Reflects the latest developer or human edit. For totp, has_value indicates a stored seed; neither the seed nor a generated code is returned.","minLength":1,"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.fields.additionalProperties.value","typeLabel":"string"}},"required":["has_value"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.fields.additionalProperties","typeLabel":"object"},"description":"Exactly one entry for each declared field.","minProperties":1,"type":"object","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.fields","typeLabel":"object"},"provider":{"enum":["kernel"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"Ready means all required fields have values, not that a login succeeded. Optional fields may remain unset.","enum":["pending_collection","ready"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0.status","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.0","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["1password"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.provider","typeLabel":"enum\u003cstring>"},"status":{"enum":["pending_authorization","ready","declined","failed"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.status","typeLabel":"enum\u003cstring>"},"access_request":{"additionalProperties":false,"description":"Non-secret broker state. Granted credential references are returned in resolved only for credentials with a customer-supplied access token; otherwise they stay encrypted server-side and can only be used by the fill operation.","properties":{"has_autofill_token":{"type":"boolean","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.has_autofill_token","typeLabel":"boolean"},"id":{"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.id","typeLabel":"string"},"state":{"description":"One of pending, resolved, denied, or failed.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.state","typeLabel":"string"},"createdAt":{"description":"Provider-created timestamp as returned by the broker.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.createdAt","typeLabel":"string"},"entries":{"description":"Login entries returned directly on accessRequest by the observed extension build. Omitted when the provider does not supply them.","items":{"additionalProperties":false,"properties":{"id":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].id","typeLabel":"string"},"keywords":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].keywords.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].keywords","typeLabel":"string[]"},"parameters":{"additionalProperties":false,"properties":{"website":{"format":"uri","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].parameters.website","typeLabel":"string\u003curi>"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].parameters","typeLabel":"object"},"reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].reason","typeLabel":"string"},"type":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX].type","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.entries","typeLabel":"object[]"},"goal":{"description":"Goal echoed by the observed createAccessRequest response when present.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.goal","typeLabel":"string"},"granted_count":{"minimum":0,"type":"integer","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.granted_count","typeLabel":"integer"},"identity":{"description":"Opaque provider identity returned by the broker.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.identity","typeLabel":"string"},"path":{"description":"Provider path if supplied in the broker response.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.path","typeLabel":"string"},"request":{"additionalProperties":false,"description":"The request object if returned by the extension. The observed create response may omit entries; no entry IDs are invented.","properties":{"entries":{"items":{"additionalProperties":false,"properties":{"id":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].id","typeLabel":"string"},"keywords":{"items":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].keywords.items.[INDEX]","typeLabel":"string"},"type":"array","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].keywords","typeLabel":"string[]"},"parameters":{"additionalProperties":false,"properties":{"website":{"format":"uri","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].parameters.website","typeLabel":"string\u003curi>"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].parameters","typeLabel":"object"},"reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].reason","typeLabel":"string"},"type":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX].type","typeLabel":"string"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.entries","typeLabel":"object[]"},"goal":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.goal","typeLabel":"string"},"version":{"type":"integer","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request.version","typeLabel":"integer"}},"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.request","typeLabel":"object"},"resolved":{"description":"Granted logins in the shape 1Password's getAccessRequestStatus returns. Present only for ready credentials with a customer-supplied access token, on single-item responses to callers that can use the vault. Each reference works only with that credential's access token and integration key.","items":{"additionalProperties":false,"properties":{"reference":{"description":"1Password credential reference. Pass it unchanged as resourcePath to the extension's fillCredential or to the 1Password SDK.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.resolved.items.[INDEX].reference","typeLabel":"string"},"entryId":{"description":"The requested entry this login satisfies, when known.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.resolved.items.[INDEX].entryId","typeLabel":"string"}},"required":["reference"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.resolved.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request.resolved","typeLabel":"object[]"}},"required":["id","state","has_autofill_token"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request","typeLabel":"object"},"access_request_id":{"description":"Opaque request ID returned by the 1Password broker after a successful createAccessRequest call.","type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.access_request_id","typeLabel":"string"},"status_reason":{"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1.status_reason","typeLabel":"string"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.1","typeLabel":"object"},{"type":"object","required":["provider","status"],"properties":{"provider":{"enum":["managed_auth"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.provider","typeLabel":"enum\u003cstring>"},"status":{"description":"Items are created ready, which means the connection has a saved Kernel credential that stores values or a TOTP seed (what has_values or has_totp_secret report on credentials), not that a login succeeded. Unavailable means it no longer does; such items advertise no operations.","enum":["ready","unavailable"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.status","typeLabel":"enum\u003cstring>"},"fields":{"additionalProperties":{"additionalProperties":false,"properties":{"type":{"description":"Text, email, and password have form inputs; totp and passkey do not and are omitted from\nboth Kernel-hosted and customer React forms. Password, totp, and passkey must be sensitive.\nA totp value is an RFC 4648 Base32 generator seed (case-insensitive, optional\ntrailing padding), not an otpauth URI or current code. Reject invalid or empty\ndecoded seeds. Browser fill generates an RFC 6238 code at execution time using\nHMAC-SHA1, 6 digits, and a 30-second period. Preserve leading zeros; never fill\nthe seed. Custom algorithms, digits, periods, and form enrollment are unsupported.\nA passkey value is a JSON-encoded FIDO Credential Exchange Format passkey object\nwith unpadded base64url `credentialId`, `userHandle` (at most 64 bytes), and `key`\n(a PKCS#8 ECDSA P-256 private key), a lowercase `rpId` domain, and optional\n`username` and `userDisplayName`. Other CXF members are ignored. Passkeys are never\nfilled into pages; use arm_passkey to sign in with one and register_passkey to create one.\n","enum":["text","email","password","totp","passkey"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.fields.additionalProperties.type","typeLabel":"enum\u003cstring>"}},"required":["type"],"type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.fields.additionalProperties","typeLabel":"object"},"description":"One entry per non-empty value on the connection's saved credential, keyed by the field name to use in fill bindings. Included on single-item responses (create and get) and omitted from list responses, like `value_keys` on credentials. Empty when unavailable or when every stored value is empty. A stored value named totp_secret is never listed or filled. Values are never returned. A totp entry is present when the credential has a TOTP seed; fill writes a generated code for it. Entries follow the connection's credential.","type":"object","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.fields","typeLabel":"object"},"status_reason":{"description":"Present when status is unavailable. connection_not_found means the connection was deleted. no_credential means the connection's credential was deleted or emptied after the item was created. external_credential means the connection was moved to an external credential provider.","enum":["connection_not_found","no_credential","external_credential"],"type":"string","uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2.status_reason","typeLabel":"enum\u003cstring>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state.oneOf.2","typeLabel":"object"}],"isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.state","typeLabel":"object"},"type":{"enum":["credential"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.type","typeLabel":"enum\u003cstring>"},"updated_at":{"format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.updated_at","typeLabel":"string\u003cdate-time>"},"version":{"description":"Starts at 1 and increments on PATCH and successful hosted submission, but not collection-link renewal. Managed auth credentials stay at 1; changes to the underlying credential are read at fill time and do not change the version.","minimum":1,"type":"integer","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.version","typeLabel":"integer"},"action":{"oneOf":[{"type":"object","description":"One schema-derived form for the item, available in ready or pending_collection\nstate. Render every form-supported field as editable; omit totp and passkey\nfields and preserve their stored values. Prefill non-sensitive values,\nand allow existing sensitive values to be preserved or replaced without ever\nrevealing them. No field subsets or per-request form configuration exist.\nValidate required fields against the resulting values, including preserved\nsecrets. Submit changed values only, using the version used to render the form.\nScoped hosted submission rejects totp and passkey edits; those writes require the ordinary\nauthenticated item API. Customer forms likewise omit them from their payloads.\nSave edits atomically. A successful hosted submission increments the version,\nmarks ready, and consumes the session; an empty edit may complete collection\nwhile preserving values. A customer form uses PATCH for changed values and\ndoes not send an empty PATCH when nothing changed.\nKernel-hosted bearer sessions require no Kernel account and are bound to the\nitem version. Expired, superseded, consumed, or deleted-item sessions cannot\nsubmit. Authenticated item GET renews expired active sessions for ready or pending items; pending\nitems always receive an action. A ready item with no active session omits the\naction until collect is invoked. Concurrent renewals return the same link.\nRenewal changes neither values nor item version. An expired link cannot renew\nitself. The hosted form handles its collection protocol; callers only open\nthe returned URL and do not extract or submit its token through the public API.\nFor customer-hosted forms, use @onkernel/vault-react and an authenticated\ncustomer backend calling the ordinary item GET/PATCH API. Kernel does not\nstore customer collection URLs or authenticate the customer's end users.\nTreat URLs and submitted values as secrets and exclude them from logs,\ntraces, and errors.\n","required":["name","url","expires_at"],"properties":{"expires_at":{"description":"Expiry of the Kernel-hosted collection link (30 minutes after issuance).","format":"date-time","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.0.expires_at","typeLabel":"string\u003cdate-time>"},"name":{"enum":["collect"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.0.name","typeLabel":"enum\u003cstring>"},"url":{"description":"Time-scoped hosted form URL (vault.kernel.sh in production). Open this URL as returned; treat it as a secret.","format":"uri","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.0.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.0","typeLabel":"object"},{"type":"object","required":["name","url","instructions"],"properties":{"instructions":{"description":"Steps for the agent to hand approval to the human and poll the resulting decision.","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.1.instructions","typeLabel":"string"},"name":{"enum":["1password_access_approval"],"type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.1.name","typeLabel":"enum\u003cstring>"},"url":{"description":"Native 1Password approval link. Present it to the account owner without modifying it; it does not grant access until they approve in their app.","format":"uri","pattern":"^onepassword://grant-brokered-access\\?access_request_reference=","type":"string","isRequired":true,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.1.url","typeLabel":"string\u003curi>"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.4.action.oneOf.1","typeLabel":"object"}],"uniqueKey":"items.[INDEX].oneOf.4.action","typeLabel":"object"}},"additionalProperties":false,"uniqueKey":"items.[INDEX].oneOf.4","typeLabel":"object"}],"uniqueKey":"items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"","typeLabel":"object[]"},"examples":{"Example":{"title":"Example","value":[{"available_expansions":[{"description":"\u003cstring>","type":"payment_methods"}],"available_operations":[{"description":"\u003cstring>","type":"authorize"}],"created_at":"2023-11-07T05:31:56Z","id":"\u003cstring>","key":"\u003cstring>","spec":{"authorization":{"client":{"type":"kernel_managed"},"method":"oauth"},"provider":"link"},"state":{"provider":"link","status":"pending_authorization","status_reason":"\u003cstring>"},"type":"wallet","updated_at":"2023-11-07T05:31:56Z","action":{"name":"link_oauth","url":"\u003cstring>"},"description":"\u003cstring>","expanded":{"link_shipping_addresses":[{"id":"\u003cstring>","is_default":true,"nickname":"\u003cstring>","address":{"administrative_area":"\u003cstring>","country_code":"\u003cstring>","dependent_locality":"\u003cstring>","line_1":"\u003cstring>","line_2":"\u003cstring>","locality":"\u003cstring>","name":"\u003cstring>","postal_code":"\u003cstring>","sorting_code":"\u003cstring>"}}],"link_user_info":{"email":"\u003cstring>","first_name":"\u003cstring>","id":"\u003cstring>","last_name":"\u003cstring>","name":"\u003cstring>","phone":"\u003cstring>","address":{"city":"\u003cstring>","country":"\u003cstring>","line1":"\u003cstring>","line2":"\u003cstring>","postal_code":"\u003cstring>","state":"\u003cstring>"},"agent_wallet_spend_limits":{"daily":{"limit":123,"remaining":123,"used":123},"per_transaction":{"limit":123},"thirty_day":{"limit":123,"remaining":123,"used":123}},"agent_wallet_step_up":{"action_url":"\u003cstring>","status":"\u003cstring>"},"default_spend_request_currency":"\u003cstring>","eligible_for_balance":true},"payment_methods":[{"capabilities":{"single_use_card":{"eligible":true,"reasons":["\u003cstring>"]}},"display":{"brand":"\u003cstring>","label":"\u003cstring>","last4":"\u003cstring>"},"id":"\u003cstring>","is_default":true,"provider":"\u003cstring>","type":"\u003cstring>","action":{"name":"card_enrollment","url":"\u003cstring>","capture_token":"\u003cstring>"},"expires_at":"2023-11-07T05:31:56Z","status":"pending_enrollment","status_reason":"\u003cstring>"}]},"expires_at":"2023-11-07T05:31:56Z"}]}},"exampleType":"generated"}},"description":"Vault items","exampleType":"generated"},"50e9bf24-a38c-42d7-b6de-87987660b016":{"content":{"application/json":{"schema":{"properties":{"code":{"description":"Application-specific error code (machine-readable)","example":"bad_request","type":"string","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"description":"Human-readable error description for debugging","example":"Missing required field: app_name","type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"description":"Additional error details (for multiple errors)","items":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"details.items.[INDEX].code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"details.items.[INDEX].message","typeLabel":"string"}},"type":"object","uniqueKey":"details.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"details","typeLabel":"object[]"},"inner_error":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"inner_error.code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"inner_error.message","typeLabel":"string"}},"type":"object","uniqueKey":"inner_error","typeLabel":"object"}},"required":["code","message"],"type":"object","uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"code":"bad_request","message":"Missing required field: app_name","details":[{"code":"invalid_input","message":"Provided version string is not semver compliant"}],"inner_error":{"code":"invalid_input","message":"Provided version string is not semver compliant"}}}},"exampleType":"generated"}},"description":"Unauthorized – missing or invalid authorization token","exampleType":"generated"},"988481b7-6449-4edc-910f-bf02728e010b":{"content":{"application/json":{"schema":{"properties":{"code":{"description":"Application-specific error code (machine-readable)","example":"bad_request","type":"string","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"description":"Human-readable error description for debugging","example":"Missing required field: app_name","type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"description":"Additional error details (for multiple errors)","items":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"details.items.[INDEX].code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"details.items.[INDEX].message","typeLabel":"string"}},"type":"object","uniqueKey":"details.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"details","typeLabel":"object[]"},"inner_error":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"inner_error.code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"inner_error.message","typeLabel":"string"}},"type":"object","uniqueKey":"inner_error","typeLabel":"object"}},"required":["code","message"],"type":"object","uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"code":"bad_request","message":"Missing required field: app_name","details":[{"code":"invalid_input","message":"Provided version string is not semver compliant"}],"inner_error":{"code":"invalid_input","message":"Provided version string is not semver compliant"}}}},"exampleType":"generated"}},"description":"Resource not found","exampleType":"generated"},"25575dfd-750e-40c2-a8aa-5027a0c88b3a":{"content":{"application/json":{"schema":{"properties":{"code":{"description":"Application-specific error code (machine-readable)","example":"bad_request","type":"string","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"description":"Human-readable error description for debugging","example":"Missing required field: app_name","type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"description":"Additional error details (for multiple errors)","items":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"details.items.[INDEX].code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"details.items.[INDEX].message","typeLabel":"string"}},"type":"object","uniqueKey":"details.items.[INDEX]","typeLabel":"object"},"type":"array","uniqueKey":"details","typeLabel":"object[]"},"inner_error":{"properties":{"code":{"description":"Lower-level error code providing more specific detail","example":"invalid_input","type":"string","uniqueKey":"inner_error.code","typeLabel":"string"},"message":{"description":"Further detail about the error","example":"Provided version string is not semver compliant","type":"string","uniqueKey":"inner_error.message","typeLabel":"string"}},"type":"object","uniqueKey":"inner_error","typeLabel":"object"}},"required":["code","message"],"type":"object","uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"code":"bad_request","message":"Missing required field: app_name","details":[{"code":"invalid_input","message":"Provided version string is not semver compliant"}],"inner_error":{"code":"invalid_input","message":"Provided version string is not semver compliant"}}}},"exampleType":"generated"}},"description":"Internal Server Error","exampleType":"generated"}},"security":{"4d1683cd-7655-4b41-b8ba-571fde51b806":{"bearerAuth":{"scheme":"bearer","type":"http","scopes":[],"schemeName":"bearerAuth"}}},"servers":{"334ce7c4-2851-4bdf-a5c8-e2a3ff581b12":{"description":"API Server","url":"https://api.onkernel.com"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","type":"http","scopes":[],"schemeName":"bearerAuth"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Bearer authentication header of the form `Bearer \u003ctoken>`, where `\u003ctoken>` is your auth token.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearerAuth","name":"Authorization"}],"title":"bearerAuth"}]},"originalFileLocation":"https://api.onkernel.com/spec.json"},"subdomain":"tbd-6fc993ce","siteName":"Kernel","title":"List vault items without secret values - Kernel","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-30T05:50:30.337Z","originalFileLocation":"api-reference/vaults/list-vault-items-without-secret-values.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"light\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Kernel\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"List vault items without secret values - Kernel\">\u003cmeta data-mint-head property=\"og:description\" content=\"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Kernel\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://www.kernel.sh/docs/images/og-image.png\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"List vault items without secret values - Kernel\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://www.kernel.sh/docs/images/og-image.png\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/docs/mintlify-assets/_mintlify/favicons/tbd-6fc993ce/CjCJZGCXnaix-Ex0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Kernel\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#212225\">\u003clink data-mint-head rel=\"canonical\" href=\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/docs/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/api-reference/vaults/list-vault-items-without-secret-values.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://www.kernel.sh/#organization\",\"name\":\"Kernel\",\"url\":\"https://www.kernel.sh\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/tbd-6fc993ce/Lt3m2NlMiCztMtQK/logo/black.svg?fit=max\u0026auto=format\u0026n=Lt3m2NlMiCztMtQK\u0026q=85\u0026s=68e987c751954bbc1d35886a02636c73\"}},{\"@type\":\"WebSite\",\"@id\":\"https://www.kernel.sh/docs#website\",\"name\":\"Kernel\",\"url\":\"https://www.kernel.sh/docs\",\"publisher\":{\"@id\":\"https://www.kernel.sh/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values#webpage\",\"url\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values\",\"name\":\"List vault items without secret values\",\"description\":\"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\",\"dateModified\":\"2026-10-30T05:50:30.337Z\",\"isPartOf\":{\"@id\":\"https://www.kernel.sh/docs#website\"},\"breadcrumb\":{\"@id\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Vaults\",\"item\":\"https://www.kernel.sh/docs/api-reference/vaults/list-provider-configurations-in-the-organization\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"List vault items without secret values\",\"item\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values#apireference\",\"headline\":\"List vault items without secret values\",\"name\":\"List vault items without secret values\",\"description\":\"Credential entries include safe field metadata and non-sensitive values. Listing never creates or renews collection sessions; only an existing unexpired active session is included. Use single-item GET or collect to obtain a fresh link.\",\"url\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values\",\"mainEntityOfPage\":{\"@id\":\"https://www.kernel.sh/docs/api-reference/vaults/list-vault-items-without-secret-values#webpage\"},\"image\":\"https://www.kernel.sh/docs/images/og-image.png\",\"dateModified\":\"2026-10-30T05:50:30.337Z\",\"publisher\":{\"@id\":\"https://www.kernel.sh/#organization\"},\"isPartOf\":{\"@id\":\"https://www.kernel.sh/docs#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Kernel\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Kernel","nav":{"global":null,"tabs":[{"tab":"Guides","pages":[{"title":"Guides","href":""}]},{"tab":"API Reference","groups":[{"group":"Apps","pages":[{"title":"List apps","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /apps","href":"/api-reference/apps/list-apps"}]},{"group":"Audit Logs","pages":[{"title":"List audit logs","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /audit-logs","href":"/api-reference/audit-logs/list-audit-logs"},{"title":"Download an audit-log export chunk","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /audit-logs/export/chunk","href":"/api-reference/audit-logs/download-an-audit-log-export-chunk"},{"title":"List audit log export destinations","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /audit-logs/export/destinations","href":"/api-reference/audit-logs/list-audit-log-export-destinations"},{"title":"Create an audit log export destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /audit-logs/export/destinations","href":"/api-reference/audit-logs/create-an-audit-log-export-destination"},{"title":"Retrieve an audit log export destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /audit-logs/export/destinations/{id}","href":"/api-reference/audit-logs/retrieve-an-audit-log-export-destination"},{"title":"Delete an audit log export destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /audit-logs/export/destinations/{id}","href":"/api-reference/audit-logs/delete-an-audit-log-export-destination"},{"title":"Update an audit log export destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /audit-logs/export/destinations/{id}","href":"/api-reference/audit-logs/update-an-audit-log-export-destination"},{"title":"Test an audit log export destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /audit-logs/export/destinations/{id}/test","href":"/api-reference/audit-logs/test-an-audit-log-export-destination"}]},{"group":"Managed Auth","pages":[{"title":"List auth connections","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /auth/connections","href":"/api-reference/managed-auth/list-auth-connections"},{"title":"Create auth connection","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /auth/connections","href":"/api-reference/managed-auth/create-auth-connection"},{"title":"Get auth connection","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /auth/connections/{id}","href":"/api-reference/managed-auth/get-auth-connection"},{"title":"Delete auth connection","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /auth/connections/{id}","href":"/api-reference/managed-auth/delete-auth-connection"},{"title":"Update auth connection","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /auth/connections/{id}","href":"/api-reference/managed-auth/update-auth-connection"},{"title":"Stream login flow events via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /auth/connections/{id}/events","href":"/api-reference/managed-auth/stream-login-flow-events-via-sse"},{"title":"Start login flow","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /auth/connections/{id}/login","href":"/api-reference/managed-auth/start-login-flow"},{"title":"Submit field values","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /auth/connections/{id}/submit","href":"/api-reference/managed-auth/submit-field-values"},{"title":"Get auth connection event timeline","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /auth/connections/{id}/timeline","href":"/api-reference/managed-auth/get-auth-connection-event-timeline"}]},{"group":"Authentication","pages":[{"title":"Get authentication context","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /auth/context","href":"/api-reference/authentication/get-authentication-context"}]},{"group":"Browser Pools","pages":[{"title":"List browser pools","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browser_pools","href":"/api-reference/browser-pools/list-browser-pools"},{"title":"Create a browser pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browser_pools","href":"/api-reference/browser-pools/create-a-browser-pool"},{"title":"Get browser pool details","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browser_pools/{id_or_name}","href":"/api-reference/browser-pools/get-browser-pool-details"},{"title":"Delete a browser pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /browser_pools/{id_or_name}","href":"/api-reference/browser-pools/delete-a-browser-pool"},{"title":"Update a browser pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /browser_pools/{id_or_name}","href":"/api-reference/browser-pools/update-a-browser-pool"},{"title":"Acquire a browser from the pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browser_pools/{id_or_name}/acquire","href":"/api-reference/browser-pools/acquire-a-browser-from-the-pool"},{"title":"Flush all idle browsers in the pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browser_pools/{id_or_name}/flush","href":"/api-reference/browser-pools/flush-all-idle-browsers-in-the-pool"},{"title":"Release a browser back to the pool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browser_pools/{id_or_name}/release","href":"/api-reference/browser-pools/release-a-browser-back-to-the-pool"}]},{"group":"Browsers","pages":[{"title":"List browser sessions","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers","href":"/api-reference/browsers/list-browser-sessions"},{"title":"Create a browser session","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers","href":"/api-reference/browsers/create-a-browser-session"},{"title":"Get browser session details","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}","href":"/api-reference/browsers/get-browser-session-details"},{"title":"Delete a browser session by ID or name.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /browsers/{id_or_name}","href":"/api-reference/browsers/delete-a-browser-session-by-id-or-name"},{"title":"Update browser session","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /browsers/{id_or_name}","href":"/api-reference/browsers/update-browser-session"},{"title":"Make an HTTP request through the browser's network stack","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/curl","href":"/api-reference/browsers/make-an-http-request-through-the-browsers-network-stack"},{"title":"Ad-hoc upload one or more unpacked extensions to a running browser instance.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/extensions","href":"/api-reference/browsers/ad-hoc-upload-one-or-more-unpacked-extensions-to-a-running-browser-instance"},{"title":"Save the current browser state to a profile","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/profiles","href":"/api-reference/browsers/save-the-current-browser-state-to-a-profile"}]},{"group":"Browser Computer Controls","pages":[{"title":"Execute a batch of computer actions sequentially","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/batch","href":"/api-reference/browser-computer-controls/execute-a-batch-of-computer-actions-sequentially"},{"title":"Simulate a mouse click action on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/click_mouse","href":"/api-reference/browser-computer-controls/simulate-a-mouse-click-action-on-the-browser-instance"},{"title":"Read text from the clipboard on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/clipboard/read","href":"/api-reference/browser-computer-controls/read-text-from-the-clipboard-on-the-browser-instance"},{"title":"Write text to the clipboard on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/clipboard/write","href":"/api-reference/browser-computer-controls/write-text-to-the-clipboard-on-the-browser-instance"},{"title":"Set cursor visibility","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/cursor","href":"/api-reference/browser-computer-controls/set-cursor-visibility"},{"title":"Drag the mouse along a path","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/drag_mouse","href":"/api-reference/browser-computer-controls/drag-the-mouse-along-a-path"},{"title":"Get the current mouse cursor position on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/get_mouse_position","href":"/api-reference/browser-computer-controls/get-the-current-mouse-cursor-position-on-the-browser-instance"},{"title":"Move the mouse cursor to the specified coordinates on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/move_mouse","href":"/api-reference/browser-computer-controls/move-the-mouse-cursor-to-the-specified-coordinates-on-the-browser-instance"},{"title":"Press one or more keys on the host computer","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/press_key","href":"/api-reference/browser-computer-controls/press-one-or-more-keys-on-the-host-computer"},{"title":"Capture a screenshot of the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/screenshot","href":"/api-reference/browser-computer-controls/capture-a-screenshot-of-the-browser-instance"},{"title":"Scroll the mouse wheel at a position on the host computer","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/scroll","href":"/api-reference/browser-computer-controls/scroll-the-mouse-wheel-at-a-position-on-the-host-computer"},{"title":"Type text on the browser instance","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/computer/type","href":"/api-reference/browser-computer-controls/type-text-on-the-browser-instance"}]},{"group":"Browser Filesystem","pages":[{"title":"Create a new directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/create_directory","href":"/api-reference/browser-filesystem/create-a-new-directory"},{"title":"Delete a directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/delete_directory","href":"/api-reference/browser-filesystem/delete-a-directory"},{"title":"Delete a file","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/delete_file","href":"/api-reference/browser-filesystem/delete-a-file"},{"title":"Download a directory as a ZIP archive","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/fs/download_dir_zip","href":"/api-reference/browser-filesystem/download-a-directory-as-a-zip-archive"},{"title":"Get information about a file or directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/fs/file_info","href":"/api-reference/browser-filesystem/get-information-about-a-file-or-directory"},{"title":"List files in a directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/fs/list_files","href":"/api-reference/browser-filesystem/list-files-in-a-directory"},{"title":"Move or rename a file or directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/move","href":"/api-reference/browser-filesystem/move-or-rename-a-file-or-directory"},{"title":"Read file contents","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/fs/read_file","href":"/api-reference/browser-filesystem/read-file-contents"},{"title":"Set file or directory permissions/ownership","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/set_file_permissions","href":"/api-reference/browser-filesystem/set-file-or-directory-permissionsownership"},{"title":"Upload one or more files","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/fs/upload","href":"/api-reference/browser-filesystem/upload-one-or-more-files"},{"title":"Upload a zip archive and extract it","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/fs/upload_zip","href":"/api-reference/browser-filesystem/upload-a-zip-archive-and-extract-it"},{"title":"Watch a directory for changes","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/fs/watch","href":"/api-reference/browser-filesystem/watch-a-directory-for-changes"},{"title":"Stop watching a directory","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /browsers/{id_or_name}/fs/watch/{watch_id}","href":"/api-reference/browser-filesystem/stop-watching-a-directory"},{"title":"Stream filesystem events for a watch","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/fs/watch/{watch_id}/events","href":"/api-reference/browser-filesystem/stream-filesystem-events-for-a-watch"},{"title":"Write or create a file","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /browsers/{id_or_name}/fs/write_file","href":"/api-reference/browser-filesystem/write-or-create-a-file"}]},{"group":"Browser Logs","pages":[{"title":"Stream log files on the browser instance via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/logs/stream","href":"/api-reference/browser-logs/stream-log-files-on-the-browser-instance-via-sse"}]},{"group":"Browser Playwright","pages":[{"title":"Execute Playwright/TypeScript code against the browser","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/playwright/execute","href":"/api-reference/browser-playwright/execute-playwrighttypescript-code-against-the-browser"},{"title":"List Playwright executors","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/playwright/executors","href":"/api-reference/browser-playwright/list-playwright-executors"},{"title":"Delete a Playwright executor","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /browsers/{id_or_name}/playwright/executors/{name}","href":"/api-reference/browser-playwright/delete-a-playwright-executor"}]},{"group":"Browser Processes","pages":[{"title":"Execute a command synchronously","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/process/exec","href":"/api-reference/browser-processes/execute-a-command-synchronously"},{"title":"Execute a command asynchronously","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/process/spawn","href":"/api-reference/browser-processes/execute-a-command-asynchronously"},{"title":"Send signal to process","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/process/{process_id}/kill","href":"/api-reference/browser-processes/send-signal-to-process"},{"title":"Resize a PTY-backed process terminal","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/process/{process_id}/resize","href":"/api-reference/browser-processes/resize-a-pty-backed-process-terminal"},{"title":"Get process status","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/process/{process_id}/status","href":"/api-reference/browser-processes/get-process-status"},{"title":"Write to process stdin","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/process/{process_id}/stdin","href":"/api-reference/browser-processes/write-to-process-stdin"},{"title":"Stream process stdout via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/process/{process_id}/stdout/stream","href":"/api-reference/browser-processes/stream-process-stdout-via-sse"}]},{"group":"Browser REPL","pages":[{"title":"Execute JavaScript in the persistent Browser REPL","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/repl","href":"/api-reference/browser-repl/execute-javascript-in-the-persistent-browser-repl"}]},{"group":"Browser Replays","pages":[{"title":"List browser session replays","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/replays","href":"/api-reference/browser-replays/list-browser-session-replays"},{"title":"Start a browser session replay recording","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/replays","href":"/api-reference/browser-replays/start-a-browser-session-replay-recording"},{"title":"Download a replay recording","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/replays/{replay_id}","href":"/api-reference/browser-replays/download-a-replay-recording"},{"title":"Stop a browser session replay recording","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/replays/{replay_id}/stop","href":"/api-reference/browser-replays/stop-a-browser-session-replay-recording"}]},{"group":"Browser Telemetry","pages":[{"title":"Read telemetry events for a browser session","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/telemetry/events","href":"/api-reference/browser-telemetry/read-telemetry-events-for-a-browser-session"},{"title":"Stream telemetry events via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/telemetry/stream","href":"/api-reference/browser-telemetry/stream-telemetry-events-via-sse"},{"title":"List OTLP destinations","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /telemetry/destinations","href":"/api-reference/browser-telemetry/list-otlp-destinations"},{"title":"Create an OTLP destination","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /telemetry/destinations","href":"/api-reference/browser-telemetry/create-an-otlp-destination"},{"title":"Get OTLP destination by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /telemetry/destinations/{id_or_name}","href":"/api-reference/browser-telemetry/get-otlp-destination-by-id-or-name"},{"title":"Delete OTLP destination by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /telemetry/destinations/{id_or_name}","href":"/api-reference/browser-telemetry/delete-otlp-destination-by-id-or-name"},{"title":"Update OTLP destination by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /telemetry/destinations/{id_or_name}","href":"/api-reference/browser-telemetry/update-otlp-destination-by-id-or-name"}]},{"group":"Browser WebMCP","pages":[{"title":"List custom WebMCP tools","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/webmcp/custom-tools","href":"/api-reference/browser-webmcp/list-custom-webmcp-tools"},{"title":"Add custom WebMCP tools","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/webmcp/custom-tools","href":"/api-reference/browser-webmcp/add-custom-webmcp-tools"},{"title":"Remove a custom WebMCP tool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /browsers/{id_or_name}/webmcp/custom-tools/{id}","href":"/api-reference/browser-webmcp/remove-a-custom-webmcp-tool"},{"title":"Invoke a discovered WebMCP tool","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /browsers/{id_or_name}/webmcp/invoke","href":"/api-reference/browser-webmcp/invoke-a-discovered-webmcp-tool"},{"title":"Discover WebMCP tools across the browser","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /browsers/{id_or_name}/webmcp/tools","href":"/api-reference/browser-webmcp/discover-webmcp-tools-across-the-browser"}]},{"group":"Config Registry","pages":[{"title":"List configs","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /config-registry","href":"/api-reference/config-registry/list-configs"},{"title":"List config analyses","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /config-registry/analyses","href":"/api-reference/config-registry/list-config-analyses"},{"title":"Get a config analysis","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /config-registry/analyses/{id}","href":"/api-reference/config-registry/get-a-config-analysis"},{"title":"Cancel a config analysis","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /config-registry/analyses/{id}/cancel","href":"/api-reference/config-registry/cancel-a-config-analysis"},{"title":"Look up a config","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /config-registry/lookup","href":"/api-reference/config-registry/look-up-a-config"},{"title":"Resolve a config","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /config-registry/resolve","href":"/api-reference/config-registry/resolve-a-config"}]},{"group":"Credentials","pages":[]},{"group":"Deployments","pages":[{"title":"List deployments","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /deployments","href":"/api-reference/deployments/list-deployments"},{"title":"Create a deployment","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /deployments","href":"/api-reference/deployments/create-a-deployment"},{"title":"Get deployment details","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /deployments/{id}","href":"/api-reference/deployments/get-deployment-details"},{"title":"Delete a deployment","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /deployments/{id}","href":"/api-reference/deployments/delete-a-deployment"},{"title":"Stream deployment events via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /deployments/{id}/events","href":"/api-reference/deployments/stream-deployment-events-via-sse"}]},{"group":"Extensions","pages":[{"title":"List browser extensions","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /extensions","href":"/api-reference/extensions/list-browser-extensions"},{"title":"Upload a browser extension","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /extensions","href":"/api-reference/extensions/upload-a-browser-extension"},{"title":"Download unpacked extension from Chrome Web Store","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /extensions/from_chrome_store","href":"/api-reference/extensions/download-unpacked-extension-from-chrome-web-store"},{"title":"Download extension archive","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /extensions/{id_or_name}","href":"/api-reference/extensions/download-extension-archive"},{"title":"Delete extension by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /extensions/{id_or_name}","href":"/api-reference/extensions/delete-extension-by-id-or-name"},{"title":"Get extension metadata","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /extensions/{id_or_name}/metadata","href":"/api-reference/extensions/get-extension-metadata"}]},{"group":"Invocations","pages":[{"title":"List invocations","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /invocations","href":"/api-reference/invocations/list-invocations"},{"title":"Invoke an action","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /invocations","href":"/api-reference/invocations/invoke-an-action"},{"title":"Get invocation details","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /invocations/{id}","href":"/api-reference/invocations/get-invocation-details"},{"title":"Update invocation","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /invocations/{id}","href":"/api-reference/invocations/update-invocation"},{"title":"List browsers for an invocation","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /invocations/{id}/browsers","href":"/api-reference/invocations/list-browsers-for-an-invocation"},{"title":"Delete browser sessions for an invocation","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /invocations/{id}/browsers","href":"/api-reference/invocations/delete-browser-sessions-for-an-invocation"},{"title":"Stream invocation events via SSE","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /invocations/{id}/events","href":"/api-reference/invocations/stream-invocation-events-via-sse"}]},{"group":"API Keys","pages":[{"title":"List API keys","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/api_keys","href":"/api-reference/api-keys/list-api-keys"},{"title":"Create an API key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /org/api_keys","href":"/api-reference/api-keys/create-an-api-key"},{"title":"Get an API key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/api_keys/{id}","href":"/api-reference/api-keys/get-an-api-key"},{"title":"Delete an API key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /org/api_keys/{id}","href":"/api-reference/api-keys/delete-an-api-key"},{"title":"Update an API key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /org/api_keys/{id}","href":"/api-reference/api-keys/update-an-api-key"},{"title":"Rotate an API key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /org/api_keys/{id}/rotate","href":"/api-reference/api-keys/rotate-an-api-key"}]},{"group":"Credential Providers","pages":[]},{"group":"Organization","pages":[{"title":"Get organization entitlements","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/entitlements","href":"/api-reference/organization/get-organization-entitlements"},{"title":"Get organization limits","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/limits","href":"/api-reference/organization/get-organization-limits"},{"title":"Update organization limits","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /org/limits","href":"/api-reference/organization/update-organization-limits"}]},{"group":"Projects","pages":[{"title":"List projects","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/projects","href":"/api-reference/projects/list-projects"},{"title":"Create a project","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /org/projects","href":"/api-reference/projects/create-a-project"},{"title":"Get a project by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/projects/{id_or_name}","href":"/api-reference/projects/get-a-project-by-id-or-name"},{"title":"Delete a project by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /org/projects/{id_or_name}","href":"/api-reference/projects/delete-a-project-by-id-or-name"},{"title":"Update a project by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /org/projects/{id_or_name}","href":"/api-reference/projects/update-a-project-by-id-or-name"},{"title":"Get project limits by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /org/projects/{id_or_name}/limits","href":"/api-reference/projects/get-project-limits-by-id-or-name"},{"title":"Update project limits by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /org/projects/{id_or_name}/limits","href":"/api-reference/projects/update-project-limits-by-id-or-name"},{"title":"List projects","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json get /projects","href":"/api-reference/projects/list-projects-1"},{"title":"Create a project","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json post /projects","href":"/api-reference/projects/create-a-project-1"},{"title":"Get a project by ID or name","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json get /projects/{id_or_name}","href":"/api-reference/projects/get-a-project-by-id-or-name-1"},{"title":"Delete a project by ID or name","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /projects/{id_or_name}","href":"/api-reference/projects/delete-a-project-by-id-or-name-1"},{"title":"Update a project by ID or name","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /projects/{id_or_name}","href":"/api-reference/projects/update-a-project-by-id-or-name-1"},{"title":"Get project limits by ID or name","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json get /projects/{id_or_name}/limits","href":"/api-reference/projects/get-project-limits-by-id-or-name-1"},{"title":"Update project limits by ID or name","deprecated":true,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /projects/{id_or_name}/limits","href":"/api-reference/projects/update-project-limits-by-id-or-name-1"}]},{"group":"Profiles","pages":[{"title":"List profiles","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /profiles","href":"/api-reference/profiles/list-profiles"},{"title":"Create a new profile","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /profiles","href":"/api-reference/profiles/create-a-new-profile"},{"title":"Get profile by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /profiles/{id_or_name}","href":"/api-reference/profiles/get-profile-by-id-or-name"},{"title":"Delete profile by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /profiles/{id_or_name}","href":"/api-reference/profiles/delete-profile-by-id-or-name"},{"title":"Rename profile by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /profiles/{id_or_name}","href":"/api-reference/profiles/rename-profile-by-id-or-name"},{"title":"Download profile archive","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /profiles/{id_or_name}/download","href":"/api-reference/profiles/download-profile-archive"}]},{"group":"Proxies","pages":[{"title":"List proxies","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /proxies","href":"/api-reference/proxies/list-proxies"},{"title":"Create a proxy","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /proxies","href":"/api-reference/proxies/create-a-proxy"},{"title":"Get proxy by ID or name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /proxies/{id_or_name}","href":"/api-reference/proxies/get-proxy-by-id-or-name"},{"title":"Delete proxy by ID","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /proxies/{id_or_name}","href":"/api-reference/proxies/delete-proxy-by-id"},{"title":"Rename proxy by ID","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /proxies/{id_or_name}","href":"/api-reference/proxies/rename-proxy-by-id"},{"title":"Check proxy health","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /proxies/{id_or_name}/check","href":"/api-reference/proxies/check-proxy-health"}]},{"group":"Vaults","pages":[{"title":"List provider configurations in the organization","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vault-provider-configs","href":"/api-reference/vaults/list-provider-configurations-in-the-organization"},{"title":"Register a provider configuration","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /vault-provider-configs","href":"/api-reference/vaults/register-a-provider-configuration"},{"title":"Get a provider configuration","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vault-provider-configs/{id_or_name}","href":"/api-reference/vaults/get-a-provider-configuration"},{"title":"Delete an unused provider configuration","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /vault-provider-configs/{id_or_name}","href":"/api-reference/vaults/delete-an-unused-provider-configuration"},{"title":"Update a provider configuration","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /vault-provider-configs/{id_or_name}","href":"/api-reference/vaults/update-a-provider-configuration"},{"title":"List vaults in the current project","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults","href":"/api-reference/vaults/list-vaults-in-the-current-project"},{"title":"Create or retrieve a vault by immutable name","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /vaults","href":"/api-reference/vaults/create-or-retrieve-a-vault-by-immutable-name"},{"title":"Get a vault","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}","href":"/api-reference/vaults/get-a-vault"},{"title":"Delete a vault and invalidate its items","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /vaults/{id_or_name}","href":"/api-reference/vaults/delete-a-vault-and-invalidate-its-items"},{"title":"Get a vault's public key for browser-encrypted credential values","description":"Returns the public key that custom credential collection web apps use to encrypt values in the browser. Use this only if you run your own credential collection web app and want values encrypted in the browser, sent to your backend still encrypted, and forwarded to Kernel's API still encrypted. In every other case, including server-side code that already holds the plaintext, use value. The page encrypts each value to this key, your backend forwards the ciphertext unchanged as encrypted_value when creating or updating a credential item in this vault, and Kernel decrypts it.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/encryption_key","href":"/api-reference/vaults/get-a-vaults-public-key-for-browser-encrypted-credential-values"},{"title":"List vault items without secret values","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/items","href":"/api-reference/vaults/list-vault-items-without-secret-values"},{"title":"Get a vault item, its currently available operations, and optionally expanded live data","description":"The response advertises operations that are valid in the item's current state and live data that can be requested through `expand`. Read each operation's description before using it. Expanded data is fetched from the provider and is not persisted in the vault item. Requesting an unavailable expansion returns 409 instead of a partial item. Pending credential items return a collection action. Kernel-hosted active collection links are renewed atomically on expiry for ready or pending items without changing the item version. Invoke collect to open a form for a ready item without clearing values. Sensitive credential values are never returned.","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/items/{key}","href":"/api-reference/vaults/get-a-vault-item-its-currently-available-operations-and-optionally-expanded-live-data"},{"title":"Create or retrieve an identical vault item by immutable key","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json put /vaults/{id_or_name}/items/{key}","href":"/api-reference/vaults/create-or-retrieve-an-identical-vault-item-by-immutable-key"},{"title":"Delete a vault item and invalidate its secret value","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json delete /vaults/{id_or_name}/items/{key}","href":"/api-reference/vaults/delete-a-vault-item-and-invalidate-its-secret-value"},{"title":"Update a card specification or credential values","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json patch /vaults/{id_or_name}/items/{key}","href":"/api-reference/vaults/update-a-card-specification-or-credential-values"},{"title":"List immutable audit events for a vault item","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json get /vaults/{id_or_name}/items/{key}/events","href":"/api-reference/vaults/list-immutable-audit-events-for-a-vault-item"},{"title":"Perform an operation advertised by a vault item","deprecated":null,"version":null,"openapi":"https://api.onkernel.com/spec.json post /vaults/{id_or_name}/items/{key}/operations","href":"/api-reference/vaults/perform-an-operation-advertised-by-a-vault-item"}]}]},{"tab":"CLI","pages":[{"title":"CLI","href":"/reference/cli"}]},{"tab":"MCP","pages":[{"title":"MCP","href":"/reference/mcp-server"}]},{"tab":"Changelog","href":"https://www.kernel.sh/changelog"}]},"basePath":"","title":"List vault items without secret values - Kernel","buildId":"dpl_4RHMRqtvdHvKgaEfTTjFqjzja3B6","deploymentId":"dpl_4RHMRqtvdHvKgaEfTTjFqjzja3B6","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-D_4Sesi0.js","utils-DRHeK26p.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C6d-DUc2.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-Dex7slho.js","snippetPresets-BcCEBp0Z.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-CufowNTX.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-A4lJSCIe.js","shallow-DqoHP7zn.js","getApiPlaygroundDisplay-Cku8AmtL.js","CodeSnippet-CtHQbNqc.js","CodeSnippets-CGo5Cslf.js","Page-BoJxk0m8.js","getPastedJson-M-bKdue4.js","icon-DEqCU4st.js","MethodPill-DnfSSXiJ.js","DuplicateIcon-BHu2PE8M.js","createIcon-BPsE5X7c.js","DynamicMarkdown-Dnt6YhtR.js","SectionHeading-6CtFWqMQ.js","axios-vUo_bRtp.js","Markdown-BoKe_1fI.js","clsx-DM5-sUNJ.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CkIdkovK.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-B3e6Nh_r.js"]}