Skip to main content

Vend catalog credentials

POST 
/catalogs/:name/credentials

Mints a short-lived OAuth bearer token for browser or SDK access to a managed (tower-catalog) catalog. Defaults to read-only (mode: "read"); pass mode: "read-write" in the body (requires the catalogs:update scope) for a token bound to the read-write principal. Team membership is enforced before vending; the master Polaris credentials never leave Tower.

Request​

Responses​

OK