Skip to main content
POST
Python SDK

Access

This operation needs a Parable token. An MCP token cannot call it. See Authentication for the kinds of token. Your roles must grant tenant.providerpolicies.manage.

Errors

  • WA-PP-011: No active member of the Workspace signs in with this email. Enter the email that a member of this Workspace signs in with.
  • WA-PP-013: The account is already linked to another member. Remove the account’s link first, then link it to this member.
  • WA-PP-015: The account is not a user account of a Provider in the catalog. Choose an account from the Unlinked accounts view.

Authorizations

Authorization
string
header
required

A personal access token, which starts with pat_. A Parable token can call each operation that the roles of its owner allow. An MCP token can call only the read operations that are open to agents. A SQL token does not work on this API.

Headers

X-Tenant
string

Workspace slug. Overrides subdomain-based workspace resolution when provided.

Example:

"acme"

X-Request-ID
string<uuid>

Optional request correlation ID echoed back in the response.

Example:

"550e8400-e29b-41d4-a716-446655440000"

Body

application/json

Links one source account to the member who signs in with email.

email
string<email>
required

The email the member signs in with.

Maximum string length: 255
Pattern: ^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$
principalKey
string
required

The account's principal key, user:<source id>, as the Unlinked accounts view lists it.

Required string length: 6 - 1024
providerKey
string
required

UUID v4 with automatic base62 encoding for client-facing APIs

Pattern: ^([0-9A-Za-z]{1,22}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$

Response

Successful response

data
object
required

A source account a Workspace administrator linked to a member; spec 0095 "Admin-confirmed links"). On each access run the member's login email gets the account's tokens, as through an exact identity link, while the member is active and the account is an active user in the Provider.

meta
object
required