Skip to main content
POST
Install a skill folder (inline files or a confirmed Cloud Files object) through UHP updateHarness

Authorizations

Authorization
string
header
required

Pass a user JWT or a oag_ User API Key on the Authorization: Bearer <token> header. Both are validated by openapi-gateway against the Auth service.

Both credential types are user-scoped: every key (and every JWT) is bound to exactly one owner, and every route grants the caller full access to that owner's own resources. Cross-tenant access is denied by owner-ACL inside the handlers — there is no per-route scope vocabulary on this API.

Removed in v1.1.0: the legacy agents:* / tasks:* / files:* / instances:* scope set has been dropped together with the 403 insufficient_scope error. Existing oag_ keys automatically gain full owner-level access and do not need to be re-issued. SDK calls that previously passed scopes to createAPIKey should drop the argument. See the changelog at the bottom of this spec for the full migration note.

Path Parameters

agentId
string
required
Maximum string length: 128

Body

application/json

Exactly one of files (inline folder, must contain SKILL.md) or file_id (confirmed Cloud Files object with sha256 and size_bytes).

name
string
required
Minimum string length: 1
files
object[]
file_id
string
sha256
string
size_bytes
integer
version
string

Response

Installed

ok
boolean
name
string