{"resource":"https://www.conductordeck.com/api","resource_name":"Conductor Deck API","resource_documentation":"https://www.conductordeck.com/developers","resource_policy_uri":"https://www.conductordeck.com/privacy","resource_tos_uri":"https://www.conductordeck.com/terms","authorization_servers":["https://www.conductordeck.com","https://fakxugadidigelghnqjx.supabase.co/auth/v1"],"scopes_supported":["public:read","workflows:read","runs:read"],"bearer_methods_supported":["header"],"x-scope-descriptions":{"public:read":"Read the public catalog surface — integrations, built-in workflow templates, and API health. Every caller holds this scope with no credential; every /api/v1 endpoint outside /api/v1/me requires exactly this and nothing more.","workflows:read":"Read the key owner's workflows: name, status, trigger summary, and step count.","runs:read":"Read the key owner's workflow run history: status, timing, and failure summary."},"x-credentials":{"api_key":{"description":"Account scopes are carried by a Conductor Deck API key, presented as 'Authorization: Bearer cd_live_…'. Keys are read-only, reach only the endpoints under /api/v1/me, and hold exactly the scopes chosen at creation — scopes cannot be added to an existing key. Keys are minted self-serve by the account holder; a key can never mint another key.","issued_at":"https://www.conductordeck.com/settings/api-keys","documentation":"https://www.conductordeck.com/developers#authentication"},"oauth_access_token":{"description":"An agent obtains scoped, read-only access with the account holder's consent instead of asking them to paste a key. Presented as 'Authorization: Bearer cd_oat_…'. Public clients only, PKCE S256 required, no refresh tokens; tokens expire after 8 hours and reach only /api/v1/me.","authorization_server":"https://www.conductordeck.com","metadata":"https://www.conductordeck.com/.well-known/oauth-authorization-server","authorization_endpoint":"https://www.conductordeck.com/oauth/authorize","token_endpoint":"https://www.conductordeck.com/api/oauth/token","registration_endpoint":"https://www.conductordeck.com/api/oauth/register","documentation":"https://www.conductordeck.com/developers#oauth"},"session_jwt":{"description":"The rest of the authenticated product API uses a Supabase-issued session JWT and is outside this metadata. It is not scope-narrowable and is not part of the documented public contract.","authorization_server":"https://fakxugadidigelghnqjx.supabase.co/auth/v1"}}}