# publish_agent_endpoint

Source: <https://everruns.com/docs/api/operations/publish_agent_endpoint/>

Deprecated

POST

/v1/agents/{agent\_id}/endpoints/{endpoint\_id}/publish

Select code samplecURL (shell:curl)

```js
const url = 'https://app.everruns.com/api/v1/agents/example/endpoints/example/publish';
const options = {method: 'POST'};


try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```sh
curl --request POST \
  --url https://app.everruns.com/api/v1/agents/example/endpoints/example/publish
```

* Production APIapp.everruns.com/api/v1/agents/{agent\_id}/endpoints/{endpoint\_id}/publish

Publish an Agent channel so it can accept ingress traffic.

## Parameters

### Path Parameters

**agent\_id**

required

string

Agent ID or name

**endpoint\_id**

required

string

Channel ID

## Responses

### 200

Channel published

Media typeapplication/json

An independently published communication channel owned by an Agent. Each channel has its own type, config, and lifecycle status.

object

**auth**

One of:

* object

  Authentication policy for this channel.

  object

  **mode**

  required

  Agent channel authentication mode.

  Stored on `AgentChannel.auth` so users can protect one endpoint without first creating org-level identity-provider state.

  string

  Allowed values: anonymous shared\_secret api\_key google\_oidc oidc oauth2\_introspection http\_basic mtls

  **provider**

  One of:

  * object

    One of:

    * object

      object

      **allowed\_domains**

      Array\<string>

      **client\_id**

      required

      string

      **type**

      required

      string

      Allowed values: google\_oidc

    * object

      object

      **issuer**

      required

      string

      **jwks\_url**

      string | null

      **type**

      required

      string

      Allowed values: oidc

    * object

      object

      **client\_id**

      string | null

      **client\_secret**

      string | null

      **client\_secret\_configured**

      boolean

      **introspection\_url**

      required

      string

      **type**

      required

      string

      Allowed values: oauth2\_introspection

    * object

      object

      **password**

      string | null

      **password\_configured**

      boolean

      **password\_hash**

      string | null

      **type**

      required

      string

      Allowed values: http\_basic

      **username**

      required

      string

    * object

      object

      **allowed\_values**

      Array\<string>

      **header\_name**

      required

      string

      **proxy\_secret**

      Shared secret the trusted proxy includes in `proxy_secret_header`. Write-only: redacted in GET responses. See TM-AUTH-021.

      string | null

      **proxy\_secret\_configured**

      boolean

      **proxy\_secret\_header**

      Header the trusted reverse proxy uses to prove its identity. Required. Configs without this field fail closed at verification time.

      string | null

      **type**

      required

      string

      Allowed values: mtls

  * null

    object

    **allowed\_domains**

    Array\<string>

    **client\_id**

    required

    string

    **type**

    required

    string

    Allowed values: google\_oidc

  * object

    object

    **issuer**

    required

    string

    **jwks\_url**

    string | null

    **type**

    required

    string

    Allowed values: oidc

  * object

    object

    **client\_id**

    string | null

    **client\_secret**

    string | null

    **client\_secret\_configured**

    boolean

    **introspection\_url**

    required

    string

    **type**

    required

    string

    Allowed values: oauth2\_introspection

  * object

    object

    **password**

    string | null

    **password\_configured**

    boolean

    **password\_hash**

    string | null

    **type**

    required

    string

    Allowed values: http\_basic

    **username**

    required

    string

  * object

    object

    **allowed\_values**

    Array\<string>

    **header\_name**

    required

    string

    **proxy\_secret**

    Shared secret the trusted proxy includes in `proxy_secret_header`. Write-only: redacted in GET responses. See TM-AUTH-021.

    string | null

    **proxy\_secret\_configured**

    boolean

    **proxy\_secret\_header**

    Header the trusted reverse proxy uses to prove its identity. Required. Configs without this field fail closed at verification time.

    string | null

    **type**

    required

    string

    Allowed values: mtls

  * object

    null

  **requirements**

  Claim and credential requirements common to channel auth providers.

  object

  **audiences**

  JWT `aud` values to require on inbound tokens. Empty list disables audience checking.

  Array\<string>

  **claims**

  Arbitrary claim equality predicates. Empty map disables claim filtering.

  object

  ***key***

  additional properties

  **domains**

  Allowlist of email/identifier domains. Empty list disables domain filtering.

  Array\<string>

  **groups**

  Allowlist of group memberships (from `groups` claim). Empty list disables group filtering.

  Array\<string>

  **scopes**

  OAuth scope strings to require (space-delimited per scope entry). Empty list disables scope checking.

  Array\<string>

  **subjects**

  Allowlist of `sub` claim values. Empty list disables subject filtering.

  Array\<string>

* null

  One of:

  * object

    object

    **allowed\_domains**

    Array\<string>

    **client\_id**

    required

    string

    **type**

    required

    string

    Allowed values: google\_oidc

  * object

    object

    **issuer**

    required

    string

    **jwks\_url**

    string | null

    **type**

    required

    string

    Allowed values: oidc

  * object

    object

    **client\_id**

    string | null

    **client\_secret**

    string | null

    **client\_secret\_configured**

    boolean

    **introspection\_url**

    required

    string

    **type**

    required

    string

    Allowed values: oauth2\_introspection

  * object

    object

    **password**

    string | null

    **password\_configured**

    boolean

    **password\_hash**

    string | null

    **type**

    required

    string

    Allowed values: http\_basic

    **username**

    required

    string

  * object

    object

    **allowed\_values**

    Array\<string>

    **header\_name**

    required

    string

    **proxy\_secret**

    Shared secret the trusted proxy includes in `proxy_secret_header`. Write-only: redacted in GET responses. See TM-AUTH-021.

    string | null

    **proxy\_secret\_configured**

    boolean

    **proxy\_secret\_header**

    Header the trusted reverse proxy uses to prove its identity. Required. Configs without this field fail closed at verification time.

    string | null

    **type**

    required

    string

    Allowed values: mtls

* object

  object

  **allowed\_domains**

  Array\<string>

  **client\_id**

  required

  string

  **type**

  required

  string

  Allowed values: google\_oidc

* null

  object

  **issuer**

  required

  string

  **jwks\_url**

  string | null

  **type**

  required

  string

  Allowed values: oidc

* object

  object

  **client\_id**

  string | null

  **client\_secret**

  string | null

  **client\_secret\_configured**

  boolean

  **introspection\_url**

  required

  string

  **type**

  required

  string

  Allowed values: oauth2\_introspection

* object

  object

  **password**

  string | null

  **password\_configured**

  boolean

  **password\_hash**

  string | null

  **type**

  required

  string

  Allowed values: http\_basic

  **username**

  required

  string

* object

  object

  **allowed\_values**

  Array\<string>

  **header\_name**

  required

  string

  **proxy\_secret**

  Shared secret the trusted proxy includes in `proxy_secret_header`. Write-only: redacted in GET responses. See TM-AUTH-021.

  string | null

  **proxy\_secret\_configured**

  boolean

  **proxy\_secret\_header**

  Header the trusted reverse proxy uses to prove its identity. Required. Configs without this field fail closed at verification time.

  string | null

  **type**

  required

  string

  Allowed values: mtls

* object

  null

* object

  null

**channel\_config**

Channel-specific configuration (validated per channel type).

**channel\_type**

required

Channel type (e.g. slack).

string

Allowed values: slack ag\_ui schedule webhook a2a fcp public\_chat voice api poppy

**created\_at**

required

Timestamp when this channel was created.

string format: date-time

**enabled**

Whether this channel is enabled.

boolean

**id**

required

External identifier (appchan\_<32-hex>). Shown as “id” in API.

string

**status**

Per-channel lifecycle. Authoritative for ingress (EVE-1007); `enabled` is retained for the App API’s existing shape.

string

Allowed values: draft live disabled

**updated\_at**

required

Timestamp when this channel was last updated.

string format: date-time

##### Example

```json
{
  "auth": {
    "mode": "api_key",
    "requirements": {
      "audiences": [
        "everruns-api"
      ],
      "scopes": [
        "app:invoke"
      ]
    }
  },
  "channel_type": "slack",
  "id": "appchan_01933b5a000070008000000000000001",
  "status": "draft"
}
```

### 404

Channel not found

Media typeapplication/json

Standard error response.

Wire shape is [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457): every error response includes `title` and `status`, and may include `detail`, `code`, `allowed_actions`, `retry_after_seconds`, `instance`, and `type`. The content type is rewritten to `application/problem+json` with the `application/problem+json` content type.

object

**allowed\_actions**

Recovery actions the caller can take next.

Array\<object>

Agent-actionable link describing a follow-up the caller can take. Used in two contexts:

* **Error recovery** — `ErrorResponse.allowed_actions` carries `rel`s like `retry`, `retry-later`, `unarchive`, `get-existing` so the agent knows the right next call after a 4xx/429.
* **Entity hypermedia** — `WithUrls<T>.allowed_actions` carries state-aware `rel`s like `cancel`, `events`, `self`, `update` on the entity itself so the agent can follow links instead of reconstructing routes from prose.

The shape is intentionally identical across both contexts; the closed `rel` vocabulary distinguishes them.

object

**hint**

Short, agent-readable hint (e.g. “Shorten ‘name’ to <= 200 chars.”, “Cancel the active turn for this session.”).

string | null

**href**

Absolute (preferred) or relative URL the caller may invoke directly. **Always present on entity hypermedia actions** (`WithUrls<T>.allowed_actions`); **optional on error-recovery actions** (`ErrorResponse.allowed_actions`) where the matching `operation_id` is enough and the URI is implicit from the failed call.

string | null

**method**

HTTP method to use against `href`. Required for entity hypermedia actions; usually omitted on error-recovery actions where the same operation is retried with its original method.

string | null

**operation\_id**

OpenAPI `operationId` the caller should invoke. Lets an MCP client resolve the call without parsing `href`.

string | null

**rel**

required

Link relation describing the action. Examples: `self`, `cancel`, `pause`, `resume`, `events`, `retry`, `retry-later`, `unarchive`, `get-existing`, `delete`, `update`.

string

**schema\_ref**

OpenAPI `$ref` to the request-body schema, when the action takes one (e.g. `#/components/schemas/UpdateSessionRequest`). Lets a tool-calling agent fetch the input shape without scanning the whole spec.

string | null

**code**

Stable, machine-readable error code (snake\_case).

string | null

**detail**

Human-readable explanation specific to this occurrence.

string | null

**instance**

Request URI for this occurrence.

string | null

**retry\_after\_seconds**

Seconds the caller should wait before retrying (429 / transient 503).

integer | null format: int32

**status**

required

HTTP status code; mirrors the response status line.

integer format: int32

**title**

required

Short, human-readable summary of the problem (e.g. “Not Found”).

string

**type**

RFC 9457 problem type URI. Optional; identifies the problem class.

string | null

##### Example

```json
{
  "allowed_actions": [
    {
      "method": "POST"
    }
  ],
  "code": "session_not_found",
  "detail": "Session session_01933b5a000070008000000000000001 not found in org org_01933b5a000070008000000000000001.",
  "instance": "/v1/sessions/session_01933b5a000070008000000000000001",
  "retry_after_seconds": 30,
  "status": 404,
  "title": "Session not found",
  "type": "https://everruns.com/docs/errors/session_not_found"
}
```