Hanzo
OpenapiIntegrations

Hands the custodied access token to its owner — the ONE place custody exits.

Hands the custodied access token to its owner — the ONE place custody exits.

GET /v1/integrations/connectors/{id}/token

Addresshttps://api.hanzo.ai/v1/integrations/connectors/{id}/token
MethodGET
Operationget_integrations_connectors_by_id_token
AuthAuthorization: Bearer $HANZO_API_KEY

Hands the custodied access token to its owner — the ONE place custody exits. The (org,user)-keyed row IS the same-user gate: another user's id is simply "no row" → 404. fresh() auto-rotates within the refreshSkew window; static providers degenerate to a plain kmsGet of Secrets[0]. Refresh tokens are NEVER returned — custody keeps the sink. The token is never logged.

Request

1 field.

FieldInTypeRequiredDescription
idpathstringyesID is the connector id, provider + ":" + label ("openai:default") — the auth-profile-id shape.

Response

StatusBodyMeaning
200connectorTokenOutok

200 body — 4 fields.

FieldInTypeAlwaysDescription
expiresAtbodystringExpiresAt is when this token expires, RFC 3339 UTC; empty if non-expiring.
labelbodystringLabel is the connector's label.
providerbodystringProvider is the connector's provider id.
tokenbodystringToken is the access token, rotated first if it was within the refresh window.

Failure carries the platform error shape — see Errors.

Examples

hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.


Integrations API · All Hanzo APIs · Interactive reference

How is this guide?

On this page