Device enrollment
Botyard REST API endpoints for device enrollment.
3 endpoints in this group. Every request authenticates with an API key; see the API reference for the other groups.
- Exchange Device Assertion:
POST /v1/public/device-assertion/exchange - Exchange Pod Svid:
POST /v1/public/device-assertion/svid-exchange - Redeem Device Enrollment:
POST /v1/public/device-enrollment/redeem
Set Oauth Tokens
Manually set OAuth tokens for a credential obtained from the Codex CLI. Use this when tokens were obtained via ``codex auth login`` rather than the browser popup flow. Tokens are stored with the same age-encryption as the standard OAuth callback path.
Exchange Device Assertion
Exchange a signed device assertion for a short-lived runtime session. The device registry is read live on every call and a device that is not active is refused here, before its signature is even examined. There is no cache, no TTL and no memoised lookup between that row and this decision, and there must never be one: it is the only reason a credential that never expires can still be revoked.