1
Load the specification
Inline reads the operations from it. Nothing is stored yet.
A GitHub
/blob/ link is rewritten to the raw file automatically.
2
Choose the operations
Only what you tick here can ever be called. Everything else stays unreachable, including operations added to the spec later.
3
Name it and say who may call it
The key goes to Secret Manager. It is never written to Firestore, a log, or anything an agent can read.
Lowercase, no spaces. Used in every tool name for this API.
Pre-filled from the spec. Every call is prefixed with this.
Stored in Secret Manager and read only by the proxy at call time. You will not be able to read it back here.
Each person still gets only the operations they are given. This list decides who may be given any at all.
Restrict calls to a network range.
Registered
Operations
What this API is allowed to expose. Removing one revokes it everywhere at once — including from any server holding it.
Specification
What argument names and types agents see for these operations.
Settings
Applies to tokens issued from now on. Tokens already out keep the lifetime they were given.
Its endpoints stop working immediately, everywhere.