Registries

External container registry credentials stored per-org and OCI realm authentication

OCI registry token authentication realm

GET

/api/v1

/oci

Endpoint advertised as the OCI realm by the internal container registry. Clients authenticate with HTTP Basic auth where the password is an organization API key. Returns a bearer token.

OCI registry token authentication realm › Responses

Bearer token

token

string

List external registries

GET

/api/v1

/org/regisry

auth_token (cookie)

Bearer

List external registries › Responses

List of registries (credentials redacted)

object[]

Save external registry credentials

POST

/api/v1

/org/regisry

auth_token (cookie)

Bearer

Persist credentials for an external container registry (encrypted via KMS). Path is intentionally /regisry (legacy spelling).

Save external registry credentials › Request Body

url

string · required

Registry host (e.g. registry.gitlab.com)

pass

string · required

Password or API token

user

string

image

string

Optional image reference. When set, the credentials are verified against this image (registry HEAD) before being stored; rejected credentials return 400.

Save external registry credentials › Responses

Credentials stored

No data returned

Get external registry credentials by ID

GET

/api/v1

/org/regisry/{registryID}

auth_token (cookie)

Bearer

Get external registry credentials by ID › path Parameters

registryID

string · uuid · required

Get external registry credentials by ID › Responses

Registry record

Delete external registry credentials

DELETE

/api/v1

/org/regisry/{registryID}

auth_token (cookie)

Bearer

Delete external registry credentials › path Parameters

registryID

string · uuid · required

Delete external registry credentials › Responses

Registry deleted

No data returned

API Keys Metrics

compose_run API

Registries

External container registry credentials stored per-org and OCI realm authentication

OCI registry token authentication realm

GET

/api/v1

/oci

Endpoint advertised as the OCI realm by the internal container registry. Clients authenticate with HTTP Basic auth where the password is an organization API key. Returns a bearer token.

OCI registry token authentication realm › Responses

Bearer token

token

string

List external registries

GET

/api/v1

/org/regisry

auth_token (cookie)

Bearer

List external registries › Responses

List of registries (credentials redacted)

object[]

Save external registry credentials

POST

/api/v1

/org/regisry

auth_token (cookie)

Bearer

Persist credentials for an external container registry (encrypted via KMS). Path is intentionally /regisry (legacy spelling).

Save external registry credentials › Request Body

url

string · required

Registry host (e.g. registry.gitlab.com)

pass

string · required

Password or API token

user

string

image

string

Optional image reference. When set, the credentials are verified against this image (registry HEAD) before being stored; rejected credentials return 400.

Save external registry credentials › Responses

Credentials stored

No data returned

Get external registry credentials by ID

GET

/api/v1

/org/regisry/{registryID}

auth_token (cookie)

Bearer

Get external registry credentials by ID › path Parameters

registryID

string · uuid · required

Get external registry credentials by ID › Responses

Registry record

Delete external registry credentials

DELETE

/api/v1

/org/regisry/{registryID}

auth_token (cookie)

Bearer

Delete external registry credentials › path Parameters

registryID

string · uuid · required

Delete external registry credentials › Responses

Registry deleted

No data returned

API Keys Metrics