Registries
AuthorizationBearer <token>Bearer project API key.
Scope: read:registries
limit?integerMaximum number of items to return, 1–200 (default 100)
int641 <= value <= 200100cursor?stringOpaque continuation token returned as next_cursor by a previous request
The page of registry credentials
application/json- response
Response for GET /registries: metadata only, never passwords.
next_cursor?|The opaque continuation token, or null on the last page.
registries*array<>The registry credentials in this page.
curl -X GET 'https://example.com/registries'{ "next_cursor": "string", "registries": [ { "created_at": "2019-08-24T14:15:22Z", "description": "string", "host": "string", "kind": "basic", "updated_at": "2019-08-24T14:15:22Z", "username": "string" } ]}AuthorizationBearer <token>Bearer project API key.
Scope: read:registries
host*stringThe registry host
The registry credential metadata
application/json- response
Registry credential metadata returned by list and get endpoints. Passwords are write-only and never returned.
created_at*stringWhen the credentials were created.
date-timedescription?|The user-facing description, or null when absent.
host*stringNormalized registry host (Docker Hub aliases collapse to
index.docker.io).
kind*RegistryKindAuthentication kind. For ecr_role the username is the IAM role ARN
the platform assumes.
"basic""ghcr""gcr""ecr""ecr_role"updated_at*stringWhen the credentials were last updated.
date-timeusername*stringThe registry username.
curl -X GET 'https://example.com/registries/string'{ "created_at": "2019-08-24T14:15:22Z", "description": "string", "host": "string", "kind": "basic", "updated_at": "2019-08-24T14:15:22Z", "username": "string"}AuthorizationBearer <token>Bearer project API key.
Scope: delete:registries
host*stringThe registry host
Registry removed
curl -X DELETE 'https://example.com/registries/string'Passwords are encrypted at rest and are write-only.
AuthorizationBearer <token>Bearer project API key.
Scope: write:registries
host*stringThe registry host
application/json- body
Registry credentials. Passwords are encrypted at rest and are write-only.
description?|An optional user-facing description.
kind?stringThe authentication kind. For ecr_role, the username is the role ARN and the password is ignored.
"basic""basic""ghcr""gcr""ecr""ecr_role"password?stringRegistry password/token (max 64 KiB). Write-only — never echoed back
by any public read endpoint. Required for every kind but ecr_role,
which ignores it.
username*stringThe registry username.
The registry credential metadata, updated
application/json- response
Registry credential metadata returned by list and get endpoints. Passwords are write-only and never returned.
created_at*stringWhen the credentials were created.
date-timedescription?|The user-facing description, or null when absent.
host*stringNormalized registry host (Docker Hub aliases collapse to
index.docker.io).
kind*RegistryKindAuthentication kind. For ecr_role the username is the IAM role ARN
the platform assumes.
"basic""ghcr""gcr""ecr""ecr_role"updated_at*stringWhen the credentials were last updated.
date-timeusername*stringThe registry username.
curl -X PUT 'https://example.com/registries/string' \ -H 'Content-Type: application/json' \ -d '{ "username": "string"}'{ "created_at": "2019-08-24T14:15:22Z", "description": "string", "host": "string", "kind": "basic", "updated_at": "2019-08-24T14:15:22Z", "username": "string"}