Strandsagents Authentication

generated: '2026-10-22'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://strandsagents.com/docs/user-guide/box/guides/network-and-credentials/index.md
sources:
- https://strandsagents.com/docs/user-guide/box/guides/network-and-credentials/index.md
- https://strandsagents.com/blog/introducing-strands-harness/index.md
- https://strandsagents.com/docs/user-guide/box/guides/network-and-credentials/
- https://strandsagents.com/docs/user-guide/harness/quickstart/index.md
description: Authentication schemes supported by Strands Agents Box egress gateway as described in the documentation.
schemes:
- type: http-bearer
  name: Bearer token (default)
  evidence: 'When a permitted request to `api.github.com` carries the placeholder where the binding puts the credential, by default `Authorization:
    Bearer`, the gateway replaces it with the real token.'
  location: header
  header: Authorization
- type: apiKey
  name: Custom header
  evidence: '`secret.header = "x-api-key"` → `x-api-key: <secret>`'
  location: header
  header: x-api-key
- type: http-bearer
  name: Custom prefix
  evidence: '`secret.prefix = "token "` → `Authorization: token <secret>`'
  location: header
  header: Authorization
- type: http-basic
  name: HTTP Basic
  evidence: '`secret.placement = "basic_auth"` → `Authorization: Basic …`, with the secret as the `user:password` pair'
  location: header
  header: Authorization
- type: apiKey
  name: Query parameter
  evidence: '`secret.placement = "query_param"`, `secret.param = "key"` → `?key=<secret>`'
  location: query
- type: other
  name: AWS SigV4
  evidence: '`secret.ref = "aws://…"` or `"credsd://…"` → A SigV4 signature'
  location: header
docs: https://strandsagents.com/docs/user-guide/box/guides/network-and-credentials/index.md