Skip to main content
Test provider credentials without saving them

Authorizations

Authorization
string
header
required

BoxRouter API key; never an upstream provider key.

Body

application/json

Supplied flat credential fields. No customer code runs, so a retried Test is safe and makes the same read-only provider request.

credentials
object
required

One provider's account credentials as flat fields. provider names an available provider (available_providers of listProviderAccounts); every other property is one of that provider's credential_fields. A required field is a nonempty string; an optional field is a string or null, and null is the same as leaving it out. Secret values contain 12 through 16384 characters and identifiers 1 through 256. A field the provider does not declare, a missing or null required field, or a value of another type is rejected; errors name the field, never its value. Accepted only on credential-management endpoints, over TLS. Write-only and encrypted at rest. Never logged or returned.

Response

Raw result of the read-only provider request.

ok
boolean
required
native_status
integer | null
required

Provider's native HTTP status; null when the protocol has no HTTP status.

native_body
string
required

Provider's response body, truncated to 4096 characters. Exact credential secret values are removed before the body is returned; partial or transformed values can remain. Review the response before sharing it. The literal [redacted] marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.

Maximum string length: 4096