Seqera Labs

Seqera Labs identities API

The identities API from Seqera Labs — 4 operation(s) for identities.

GitHub OpenAPI

Operations 9

GET /identities List Managed Identities #
POST /identities Create Managed Identity #
DELETE /identities/{managedIdentityId} Delete a Managed Identity #
GET /identities/{managedIdentityId} Describe a Managed Identity #
PUT /identities/{managedIdentityId} Update a Managed Identity #
GET /identities/{managedIdentityId}/credentials List Managed Credentials #
POST /identities/{managedIdentityId}/credentials Creates Managed Credentials #
DELETE /identities/{managedIdentityId}/credentials/{managedCredentialsId} Delete a user's Managed Credentials record belonging to a Managed Identity #
PUT /identities/{managedIdentityId}/credentials/{managedCredentialsId} Updates Managed Credentials #

Documentation

📖
Documentation
https://docs.seqera.io/platform-cloud/api/overview
📖
APIReference
https://docs.seqera.io/platform-api/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/authentication/seqera-labs-authentication.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/openapi/seqera-labs-identities-api-openapi.yml

Other Resources

🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/errors/seqera-labs-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/data-model/seqera-labs-data-model.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/seqera-labs-identities-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

seqera-labs-identities-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact:
    email: info@seqera.io
    url: https://seqera.io
  description: Seqera Platform services API
  title: Seqera actions Identities API
  version: 1.181.0
servers:
- url: https://api.cloud.seqera.io
  description: Base URL declared by the provider in apis.yml (roadmap#122).
tags:
- name: identities
paths:
  /identities:
    get:
      description: List all Managed Identities in an organization.
      operationId: ListManagedIdentities
      parameters:
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: 'Optional search criteria, allowing free text search on name and keywords: `platform:`'
        in: query
        name: search
        schema:
          type:
          - string
          - 'null'
      - description: Pagination max results
        in: query
        name: max
        schema:
          format: int32
          type:
          - integer
          - 'null'
      - description: Pagination offset
        in: query
        name: offset
        schema:
          format: int32
          type:
          - integer
          - 'null'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListManagedIdentitiesResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: List Managed Identities
      tags:
      - identities
    post:
      description: Create a new Managed Identity in an organization.
      operationId: CreateManagedIdentity
      parameters:
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateManagedIdentityRequest'
        description: Managed Identity create request
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateManagedIdentityResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: Create Managed Identity
      tags:
      - identities
  /identities/{managedIdentityId}:
    delete:
      description: Delete a Managed Identity identified by the given ID.
      operationId: DeleteManagedIdentity
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: If deletion of associated Managed Credentials will be blocked by running jobs that depend on them
        in: query
        name: checked
        schema:
          type:
          - boolean
          - 'null'
      responses:
        '204':
          description: OK - No content
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
        '409':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeleteManagedCredentialsConflictResponse'
          description: Running jobs block the deletion of this Managed Identity
      security:
      - BearerAuth: []
      summary: Delete a Managed Identity
      tags:
      - identities
    get:
      description: Describe a Managed Identity in an organization.
      operationId: DescribeManagedIdentity
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateManagedIdentityResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: Describe a Managed Identity
      tags:
      - identities
    put:
      description: Update a Managed Identity identified by the given ID.
      operationId: UpdateManagedIdentity
      parameters:
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateManagedIdentityRequest'
        description: Managed Identity update request
        required: true
      responses:
        '204':
          description: OK - No content
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: Update a Managed Identity
      tags:
      - identities
  /identities/{managedIdentityId}/credentials:
    get:
      description: List Managed Credentials belonging to a Managed Identity.
      operationId: ListManagedCredentials
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: User numeric identifier to filter records by
        in: query
        name: userId
        schema:
          format: int64
          type:
          - integer
          - 'null'
      - description: 'Optional filtering on Managed Credentials for the given Managed Identity:                                              Allows free text search on `userName` or `firstName + lastName`.                                              Accepts keywords: `is:missing` or `is:added` to filter on credentials status.                                              If not provided (or both provided), all are returned.'
        in: query
        name: search
        schema:
          type: string
      - description: Pagination max results
        in: query
        name: max
        schema:
          format: int32
          type: integer
      - description: Pagination offset
        in: query
        name: offset
        schema:
          format: int32
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListManagedCredentialsResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: List Managed Credentials
      tags:
      - identities
    post:
      description: Creates Managed Credentials for the given Managed Identity
      operationId: CreateManagedCredentials
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: User numeric identifier
        in: query
        name: userId
        schema:
          format: int64
          type:
          - integer
          - 'null'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateManagedCredentialsRequest'
        description: Managed Credentials create request
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateManagedCredentialsResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: Creates Managed Credentials
      tags:
      - identities
  /identities/{managedIdentityId}/credentials/{managedCredentialsId}:
    delete:
      description: Delete Managed Credentials
      operationId: DeleteManagedCredentials
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Managed Credentials numeric identifier
        in: path
        name: managedCredentialsId
        required: true
        schema:
          format: int64
          type:
          - integer
          - 'null'
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      - description: If Managed Credentials deletion will be blocked by running jobs that depend on them
        in: query
        name: checked
        schema:
          type:
          - boolean
          - 'null'
      responses:
        '204':
          description: OK - No content
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
        '409':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeleteManagedCredentialsConflictResponse'
          description: Running jobs block the deletion of this Managed Credentials
      security:
      - BearerAuth: []
      summary: Delete a user's Managed Credentials record belonging to a Managed Identity
      tags:
      - identities
    put:
      description: Update Managed Credentials for the given Managed Identity
      operationId: UpdateManagedCredentials
      parameters:
      - description: Managed Identity numeric identifier
        in: path
        name: managedIdentityId
        required: true
        schema:
          format: int64
          type: integer
      - description: Managed Credentials numeric identifier
        in: path
        name: managedCredentialsId
        required: true
        schema:
          format: int64
          type: integer
      - description: Organization numeric identifier
        in: query
        name: orgId
        schema:
          format: int64
          type: integer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateManagedCredentialsRequest'
        description: Managed Credentials update request
        required: true
      responses:
        '204':
          description: OK - No content
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Bad request
        '403':
          description: Operation not allowed
      security:
      - BearerAuth: []
      summary: Updates Managed Credentials
      tags:
      - identities
components:
  schemas:
    AwsSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/SecurityKeys'
      - properties:
          accessKey:
            type: string
          assumeRoleArn:
            type: string
          discriminator:
            type: string
          externalId:
            type: string
          mode:
            $ref: '#/components/schemas/AwsCredentialsMode'
          secretKey:
            type: string
            writeOnly: true
        type: object
      title: AWS credentials
      type: object
    Credentials.Status:
      enum:
      - AVAILABLE
      - INVALID
      type: string
    AzBatchConfig:
      allOf:
      - $ref: '#/components/schemas/ComputeConfig'
      - properties:
          autoPoolMode:
            deprecated: true
            type: boolean
          deleteJobsOnCompletion:
            allOf:
            - $ref: '#/components/schemas/JobCleanupPolicy'
            readOnly: true
          deleteJobsOnCompletionEnabled:
            type:
            - boolean
            - 'null'
          deletePoolsOnCompletion:
            type: boolean
          deleteTasksOnCompletion:
            type:
            - boolean
            - 'null'
          forge:
            $ref: '#/components/schemas/AzBatchForgeConfig'
          fusion2Enabled:
            type: boolean
          headJobCpus:
            description: Number of CPU slots reserved on the head pool VM for the Nextflow head job. Defaults to 1 so multiple head jobs can share a head pool VM; increase to dedicate more CPU and memory to each head job.
            example: 1
            format: int32
            type:
            - integer
            - 'null'
          headJobMemoryMb:
            description: Memory in MiB reserved for the Nextflow head job container. When omitted, the value is derived from the head pool VM size as the per-slot share (vmMemory / vmCpus) multiplied by the requested slot count.
            example: 4096
            format: int32
            type:
            - integer
            - 'null'
          headPool:
            type: string
          jobMaxWallClockTime:
            description: 'Maximum wall clock time for Azure Batch jobs before automatic termination. Accepts human-readable duration syntax (e.g., ''7d'', ''1d1h1m''). Defaults to 7d when not specified. Maximum: 180 days.'
            example: 7d
            type:
            - string
            - 'null'
          managedIdentityClientId:
            type:
            - string
            - 'null'
          managedIdentityHeadResourceId:
            type:
            - string
            - 'null'
          managedIdentityPoolClientId:
            type:
            - string
            - 'null'
          managedIdentityPoolResourceId:
            type:
            - string
            - 'null'
          region:
            type: string
          subnetId:
            description: Azure VNet subnet resource ID for private network isolation. Requires Entra (service principal) credentials.
            example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myRg/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet
            type:
            - string
            - 'null'
          terminateJobsOnCompletion:
            type:
            - boolean
            - 'null'
          tokenDuration:
            type: string
          waveEnabled:
            type: boolean
          workerPool:
            type: string
        type: object
      title: Azure Batch configuration
      type: object
    GoogleLifeSciencesConfig:
      allOf:
      - $ref: '#/components/schemas/ComputeConfig'
      - properties:
          bootDiskSizeGb:
            format: int32
            type: integer
          copyImage:
            type: string
          debugMode:
            format: int32
            type: integer
          headJobCpus:
            format: int32
            type: integer
          headJobMemoryMb:
            format: int32
            type: integer
          labels:
            additionalProperties:
              type: string
            type: object
          location:
            type: string
          nfsMount:
            type: string
          nfsTarget:
            type: string
          preemptible:
            type: boolean
          projectId:
            type: string
          region:
            type: string
          sshDaemon:
            type: boolean
          sshImage:
            type: string
          usePrivateAddress:
            type: boolean
          zones:
            items:
              type: string
            type: array
        type: object
      title: Google Life Sciences configuration (retired)
      type: object
    ManagedCredentialsDbDto:
      properties:
        id:
          format: int64
          type: integer
      type: object
    CreateManagedIdentityResponse:
      properties:
        config:
          $ref: '#/components/schemas/ComputeConfig'
        id:
          format: int64
          type: integer
        name:
          type: string
        platform:
          type: string
      type: object
    AgentSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/SecurityKeys'
      - properties:
          connectionId:
            type: string
          discriminator:
            type: string
          shared:
            type: boolean
          workDir:
            type: string
        type: object
      title: Tower Agent credentials
      type: object
    ListManagedCredentialsRespDto:
      properties:
        avatarUrl:
          type: string
        firstName:
          type: string
        lastName:
          type: string
        managedCredentialsId:
          format: int64
          type: integer
        metadata:
          $ref: '#/components/schemas/ManagedCredentialsMetadata'
        provider:
          enum:
          - ssh
          type: string
        userId:
          format: int64
          type: integer
        userName:
          type: string
      type: object
    SchedConfig.Pool:
      properties:
        desiredWarm:
          description: Target number of idle VMs to keep warm. Bounds total warm-VM cost across all of this CE's pool clusters.
          format: int32
          type: integer
        enabled:
          description: Whether the warm pool is active for this CE. When false, the scheduler will not maintain idle VMs.
          type: boolean
        scaleToZeroSecs:
          description: Seconds of inactivity after which the warm pool scales to zero. Set to 0 to never scale to zero.
          format: int32
          type: integer
      type: object
    AltairPbsComputeConfig:
      allOf:
      - $ref: '#/components/schemas/AbstractGridConfig'
      title: Altair PBS configuration
      type: object
    ManagedCredentialsMetadata:
      properties:
        discriminator:
          readOnly: true
          type: string
      type: object
    SecurityKeys:
      discriminator:
        mapping:
          aws: '#/components/schemas/AwsSecurityKeys'
          azure: '#/components/schemas/AzureSecurityKeys'
          azure-cloud: '#/components/schemas/AzureCloudKeys'
          azure_entra: '#/components/schemas/AzureEntraKeys'
          azurerepos: '#/components/schemas/AzureReposSecurityKeys'
          bitbucket: '#/components/schemas/BitBucketSecurityKeys'
          codecommit: '#/components/schemas/CodeCommitSecurityKeys'
          container-reg: '#/components/schemas/ContainerRegistryKeys'
          gitea: '#/components/schemas/GiteaSecurityKeys'
          github: '#/components/schemas/GitHubSecurityKeys'
          github_app: '#/components/schemas/GitHubAppSecurityKeys'
          gitlab: '#/components/schemas/GitLabSecurityKeys'
          google: '#/components/schemas/GoogleSecurityKeys'
          k8s: '#/components/schemas/K8sSecurityKeys'
          local: '#/components/schemas/LocalSecurityKeys'
          s3: '#/components/schemas/S3SecurityKeys'
          seqeracompute: '#/components/schemas/SeqeraComputeSecurityKeys'
          ssh: '#/components/schemas/SSHSecurityKeys'
          tw-agent: '#/components/schemas/AgentSecurityKeys'
        propertyName: discriminator
      oneOf:
      - $ref: '#/components/schemas/AwsSecurityKeys'
      - $ref: '#/components/schemas/GoogleSecurityKeys'
      - $ref: '#/components/schemas/GitHubSecurityKeys'
      - $ref: '#/components/schemas/GitHubAppSecurityKeys'
      - $ref: '#/components/schemas/GitLabSecurityKeys'
      - $ref: '#/components/schemas/BitBucketSecurityKeys'
      - $ref: '#/components/schemas/GiteaSecurityKeys'
      - $ref: '#/components/schemas/SSHSecurityKeys'
      - $ref: '#/components/schemas/K8sSecurityKeys'
      - $ref: '#/components/schemas/AzureSecurityKeys'
      - $ref: '#/components/schemas/AzureCloudKeys'
      - $ref: '#/components/schemas/AzureReposSecurityKeys'
      - $ref: '#/components/schemas/ContainerRegistryKeys'
      - $ref: '#/components/schemas/AgentSecurityKeys'
      - $ref: '#/components/schemas/CodeCommitSecurityKeys'
      - $ref: '#/components/schemas/AzureEntraKeys'
      - $ref: '#/components/schemas/SeqeraComputeSecurityKeys'
      - $ref: '#/components/schemas/S3SecurityKeys'
      - $ref: '#/components/schemas/LocalSecurityKeys'
      properties:
        discriminator:
          type: string
      type: object
    ForgeConfig:
      properties:
        allocStrategy:
          enum:
          - BEST_FIT
          - BEST_FIT_PROGRESSIVE
          - SPOT_CAPACITY_OPTIMIZED
          - SPOT_PRICE_CAPACITY_OPTIMIZED
          type: string
        allowBuckets:
          items:
            type: string
          type: array
        arm64Enabled:
          type: boolean
        bidPercentage:
          format: int32
          type: integer
        disposeOnDeletion:
          type: boolean
        dragenAmiId:
          type: string
        dragenEnabled:
          type: boolean
        dragenInstanceType:
          type: string
        ebsAutoScale:
          type: boolean
        ebsBlockSize:
          format: int32
          type: integer
        ebsBootSize:
          format: int32
          type: integer
        ec2KeyPair:
          type: string
        ecsConfig:
          type: string
        efsCreate:
          type: boolean
        efsId:
          type: string
        efsMount:
          type: string
        fargateHeadEnabled:
          type: boolean
        fsxMount:
          type: string
        fsxName:
          type: string
        fsxSize:
          format: int32
          type: integer
        fusionEnabled:
          type: boolean
        gpuEnabled:
          type: boolean
        imageId:
          type: string
        instanceTypes:
          items:
            type: string
          type: array
        maxCpus:
          format: int32
          type: integer
        minCpus:
          format: int32
          type: integer
        securityGroups:
          items:
            type: string
          type: array
        subnets:
          items:
            type: string
          type: array
        type:
          enum:
          - SPOT
          - EC2
          type: string
        vpcId:
          type: string
      type: object
    ListManagedCredentialsResponse:
      properties:
        managedCredentials:
          items:
            $ref: '#/components/schemas/ListManagedCredentialsRespDto'
          type: array
        totalSize:
          format: int64
          type: integer
      type: object
    AbstractGridConfig:
      allOf:
      - $ref: '#/components/schemas/ComputeConfig'
      - properties:
          computeQueue:
            type: string
          headJobOptions:
            type: string
          headQueue:
            type: string
          hostName:
            type: string
          launchDir:
            type: string
          maxQueueSize:
            format: int32
            type: integer
          port:
            format: int32
            type: integer
          propagateHeadJobOptions:
            type: boolean
          userName:
            type: string
        type: object
      type: object
    GitLabSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/GitKeys'
      - properties:
          discriminator:
            type: string
          password:
            type: string
            writeOnly: true
          token:
            type: string
            writeOnly: true
          username:
            type: string
        type: object
      title: GitLab credentials
      type: object
    CreateManagedIdentityRequest:
      properties:
        config:
          $ref: '#/components/schemas/AbstractGridConfig'
        name:
          type: string
        platform:
          enum:
          - altair-platform
          - lsf-platform
          - moab-platform
          - slurm-platform
          - uge-platform
          type: string
      type: object
    MoabComputeConfig:
      allOf:
      - $ref: '#/components/schemas/AbstractGridConfig'
      title: Moab configuration
      type: object
    ManagedIdentityDbDto_AbstractGridConfig_:
      properties:
        config:
          $ref: '#/components/schemas/AbstractGridConfig'
        id:
          format: int64
          type: integer
        name:
          type: string
        platform:
          enum:
          - altair-platform
          - lsf-platform
          - moab-platform
          - slurm-platform
          - uge-platform
          type: string
      type: object
    UpdateManagedCredentialsRequest:
      properties:
        credentials:
          $ref: '#/components/schemas/Credentials'
        metadata:
          $ref: '#/components/schemas/ManagedCredentialsMetadata'
        provider:
          enum:
          - ssh
          type: string
      type: object
    LocalSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/SecurityKeys'
      - properties:
          discriminator:
            type: string
          password:
            type: string
            writeOnly: true
        type: object
      title: Local security keys
      type: object
    DeleteManagedCredentialsConflictResponse:
      properties:
        conflicts:
          items:
            $ref: '#/components/schemas/DeleteManagedCredentialsConflictResponse.Conflict'
          type: array
        managedCredentialsId:
          type: string
      type: object
    SeqeraComputeConfig:
      allOf:
      - $ref: '#/components/schemas/ComputeConfig'
      - properties:
          defaultDataRetentionPolicy:
            type: boolean
          instanceTypeSize:
            allOf:
            - $ref: '#/components/schemas/SeqeraComputeCloudInstanceTypeSize'
            description: Size of the Data Studios instance (SMALL, MEDIUM, LARGE)
          region:
            type: string
        type: object
      title: Seqera Compute configuration
      type: object
    AzureReposSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/GitKeys'
      - properties:
          discriminator:
            type: string
          password:
            type: string
            writeOnly: true
          token:
            type: string
          username:
            type: string
        type: object
      title: Azure Repos credentials
      type: object
    S3SecurityKeys:
      allOf:
      - $ref: '#/components/schemas/SecurityKeys'
      - properties:
          accessKey:
            type: string
          discriminator:
            type: string
          pathStyleAccessEnabled:
            type: boolean
          secretKey:
            type: string
            writeOnly: true
        type: object
      title: S3-compatible credentials
      type: object
    Credentials:
      properties:
        baseUrl:
          maxLength: 200
          pattern: ''
          type: string
        category:
          maxLength: 20
          type: string
        dateCreated:
          format: date-time
          readOnly: true
          type: string
        deleted:
          readOnly: true
          type: boolean
        description:
          type: string
        id:
          maxLength: 22
          type: string
        keys:
          $ref: '#/components/schemas/SecurityKeys'
        lastUpdated:
          format: date-time
          readOnly: true
          type: string
        lastUsed:
          format: date-time
          readOnly: true
          type: string
        lastValidated:
          description: Timestamp of the most recent completed validation probe (success or authoritative fail). Null until first probe. NOT advanced on transient probe outcomes.
          format: date-time
          readOnly: true
          type: string
        message:
          description: Provider-supplied error detail captured when status transitions to INVALID. Cleared (null) whenever status returns to AVAILABLE. Truncated to 4096 characters with a trailing " (truncated)" suffix when the underlying provider message exceeds that limit.
          maxLength: 4096
          readOnly: true
          type: string
        name:
          maxLength: 100
          type: string
        provider:
          enum:
          - aws
          - azure
          - azure_entra
          - google
          - github
          - github_app
          - gitlab
          - bitbucket
          - ssh
          - k8s
          - container-reg
          - tw-agent
          - codecommit
          - gitea
          - azurerepos
          - seqeracompute
          - azure-cloud
          - s3
          maxLength: 16
          type: string
        status:
          allOf:
          - $ref: '#/components/schemas/Credentials.Status'
          description: Validation health for these credentials. AVAILABLE = last probe succeeded (or no probe has been attempted yet). INVALID = the last probe was authoritatively rejected by the provider (see message). Transient probe failures (network / 5xx) leave this field untouched.
          readOnly: true
      required:
      - name
      - provider
      type: object
    GiteaSecurityKeys:
      allOf:
      - $ref: '#/components/schemas/GitKeys'
      - properties:
          discriminator:
            type: string
          password:
            type: string
            writeOnly: true
          token:
            type: string
          username:
            type: string
        type: object
      title: Gitea credentials
      type: object
    AwsCredentialsMode:
      enum:
      - keys
      - role
      type: string
      x-enum-varnames:
      - keys
      - role
      x-type: String
    DeleteManagedCredentialsConflictResponse.Conflict:
      properties:
        id:
          type: string
        name:
          type: string
        type:
          type: string
        url:
          type: string
      type: object
    ContainerRegistryKeys:
      allOf:
      - $ref: '#/components/schemas/SecurityKeys'
      - properties:
          discriminator:
            type: string
          password:
            type: string
            writeOnly: true
          registry:
            type: string
          userName:
            type: string
        type: object
      title: Container registry credentials
      type: object
    AzureEntraKeys:
      allOf:
      - $ref: '#/components/schemas/AzureSecurityKeys'
      - properties:
          clientId:
            type: string
          clientSecret:
            type: string
            writeOnly: true
          discriminator:
            type: string
          tenantId:
            type: string
        type: object
      title: Azure Entra credentials
      type: object
    AzureSecurityKe

# --- truncated at 32 KB (55 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/seqera-labs/refs/heads/main/openapi/seqera-labs-identities-api-openapi.yml