{
  "contract_version": "bos-identity-api-key/v1",
  "preferred_authentication": "oauth2",
  "authentication": {
    "auth_scheme": "api_key",
    "placement": "bearer_header",
    "api_hosts": [
      "dfsm.ai"
    ],
    "secret_entry": "client_secure_vault",
    "secret_presentation": "one_time",
    "random_bytes": 32,
    "optional_expiry": true,
    "authority": "current_bos_identity_permissions"
  },
  "mcp_resource": "https://dfsm.ai/mcp/apps/bos/platform",
  "documentation": "https://dfsm.ai/apps/bos/api-key-client-example.html",
  "discovery": {
    "tool": "bos_get_context",
    "arguments": {}
  },
  "target_selection": {
    "source": "discovered_current_contexts",
    "request_parameter": "context_handle"
  },
  "context_tools": "bos_list_context_tools",
  "execution": "bos_execute",
  "resources": "use_exact_discovered_context_bound_uri",
  "deterministic_api": {
    "targets": "discovered_application_and_organization_path",
    "context_header": "X-BOS-Context-Handle"
  },
  "lifecycle_tools": [
    "bos_list_api_keys",
    "bos_revoke_api_key",
    "bos_logout"
  ],
  "issuance": "local_operator_gcp_tooling"
}