Open the form
Callsave_inventory_source with only the agent’s agentId.
agentId stands alone. Sending it with any other save_inventory_source field,
such as endpointUrl, authenticationType or name, is refused with
VALIDATION_FAILED and names the extra field. The form owns those values for a
partner’s agent, and a credential is never a model-visible input. An agentId
the account cannot connect to is refused before the form opens.
To change or add a source you operate yourself, keep using
save_inventory_source without agentId.
The form opens as an MCP app, so it needs a host that renders them. See
MCP Apps host.
What the form asks for
The partner publishes how a publisher connects. The form shows what the partner published and nothing else:- Connection type. Shown only when the partner publishes more than one.
- Endpoint. An address field appears only when the partner’s setup asks the publisher for one, for example a tenant URL. When the partner serves every publisher from one address, the form asks for none. Apostra validates the address you enter.
- Partner fields. Any further fields the partner’s setup defines, such as a source name.
- How to authenticate. Shown only when the partner offers more than one method. Credentials are entered in password fields. They are used to connect and are not shown again.
What happens when you connect
- Apostra creates your source attached to the partner’s shared agent.
- Apostra completes the connection. The connection is accepted and validation starts.
- The source goes live once validation passes and the agent is certified. The agent’s single certification covers every publisher connected to it.