Review changes before publication
Compares current authoring configuration with the live version. Credentials are redacted by structure. ETag identifies the complete reviewed configuration. The ETag is the publication token. It covers the draft revision, the revision of each bound tool, the revision of each referenced MCP server, each pinned secret version, the direct agent library membership and source state/revision, and the default-tool policy. A change to any of them, including an MCP server edit shared by several agents, changes the token.
Authentication
Create and manage workspace-owned keys through the existing app session routes, outside this public API. Creator and manager identities are audit actors only. Key validity follows workspace policy, expiry and explicit revocation, independently of creator membership. Do not include a workspace-selection header.
Path parameters
Response headers
Publication token: covers the draft revision, bound tool revisions, referenced MCP server revisions, pinned secret versions, the direct agent library membership and source state/revision, and the default-tool policy. Send it as If-Match to publishAgent and to draft edits.