Harness

Harness Token API

This contains APIs related to Token as defined in Harness

Documentation GitHub OpenAPI

Operations 8

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /ng/api/token Create an API key token · Create a Token #

Ask an LLM

“How do I create a new token under an API key in Harness?”

“Can I set an expiry date when creating a token?”

Tell an agent

Create token {name} with identifier {identifier} under API key {api_key}.

Create a token {identifier} named {name} valid until {valid_to}.

PUT /ng/api/token/{identifier} Update an existing token · Update a Token #

Ask an LLM

“How do I rename or change the description of an existing token?”

“Can I extend the validity window of a token I already created?”

Tell an agent

Update token {identifier} to have name {name}.

Change the expiry of existing token {identifier} to {valid_to}.

DELETE /ng/api/token/{identifier} Delete a token · Delete a Token #

Ask an LLM

“How do I delete a token so it can no longer be used?”

“What do I need to identify a token's parent and API key to delete it?”

Tell an agent destructive · confirm first

Delete token {identifier} from API key {api_key} owned by {parent}.

Remove {type} token {identifier} under key {api_key} for {parent}.

GET /ng/api/token/aggregate List tokens across API keys · List all Tokens #

Ask an LLM

“Which tokens exist for my service account API keys?”

“Can I list only tokens that are still active?”

Tell an agent

List all {type} tokens.

Show active {type} tokens under API key {api_key}.

POST /ng/api/token/rotate/{identifier} Rotate a token · Rotate a Token #

Ask an LLM

“How do I rotate a token without creating a new one from scratch?”

“Can I schedule when the old token expires after rotation?”

Tell an agent

Rotate token {identifier} under API key {api_key} for {parent}.

Rotate {type} token {identifier} of key {api_key} owned by {parent}, expiring the old one at {timestamp}.

POST /ng/api/token/validate Validate a token · Validate a Token #

Ask an LLM

“Is this Harness token still valid for my account?”

“Can I check a token before using it in automation?”

Tell an agent

Validate a token for account {account}.

Check whether my token is valid.

GET /sto/api/v2/token Issue a cross-service token for STO · Token#Issue token #

Ask an LLM

“How do I exchange my Harness token for a Security Testing Orchestration cross-service token?”

“Can I request an STO token for a specific audience?”

Tell an agent

Issue an STO cross-service token for audience {audience} using Harness token {harness_token}.

Get a security testing token for account {account} from {harness_token}.

GET /v1/token Issue a cross-service token (v1) · Issue a cross-service token #

Ask an LLM

“Is there a v1 endpoint for issuing a cross-service token?”

“What does the older /v1/token endpoint return for my account?”

Tell an agent

Issue a cross-service token from the v1 endpoint for account {account}.

Call the legacy v1 token issuer for {account}.

Harness Token API

Operations 8

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification