Skip to navigation
Runtype APIIdentity Integrations

Create an identity integration

Creates an Identity Exchange integration. The descriptor is validated against the shared schema and the server mints the integration id (the cross-integration isolation namespace).

Authentication

AuthorizationBearer
API key or Clerk session token

Request

This endpoint expects an object.
descriptormap from strings to anyRequired

The IdentityAdapterDescriptor (without id — the server mints it). Validated against the shared identityAdapterDescriptorSchema: discriminated by ‘kind’ (‘oidc-jwt’ | ‘session’ | ‘custom’); verifiable kinds require https issuer/jwksUri, a non-wildcard audience, and asymmetric-only allowedAlgorithms; maxAssurance may only lower the kind ceiling (‘oidc-jwt’ → ‘verified’, others → ‘asserted’).

namestringRequired1-255 characters
providerenumRequired
credentialsobjectOptional

Provider management/client credentials. Sealed at rest, bound to this integration, and never returned by any endpoint. Set a field to rotate it; null clears it.

Response

Identity integration created
configuredCredentialslist of enums
Allowed values:
createdAtstring
descriptormap from strings to any
idstring
issuerstring or null
kindenum
Allowed values:
namestring
providerstring
statusenum
Allowed values:
updatedAtstring

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
409
Conflict Error
500
Internal Server Error