> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outerproduct.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Connectors



## OpenAPI

````yaml https://api.outerproduct.com/openapi.json get /v1/workspaces/{workspace_id}/connectors
openapi: 3.1.0
info:
  title: OuterProduct API
  description: >-
    Public-facing REST API for OuterProduct model distillation, prediction, and
    explanation.
  version: 0.1.8
servers: []
security: []
paths:
  /v1/workspaces/{workspace_id}/connectors:
    get:
      tags:
        - connector
      summary: List Connectors
      operationId: list_connectors_v1_workspaces__workspace_id__connectors_get
      parameters:
        - name: workspace_id
          in: path
          required: true
          schema:
            type: string
            title: Workspace Id
        - name: pageSize
          in: query
          required: false
          schema:
            type: integer
            minimum: 0
            default: 0
            title: Pagesize
        - name: pageToken
          in: query
          required: false
          schema:
            type: string
            default: ''
            title: Pagetoken
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListConnectorsResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - BearerAuth: []
components:
  schemas:
    ListConnectorsResponse:
      properties:
        connectors:
          items:
            $ref: '#/components/schemas/Connector-Output'
          type: array
          title: Connectors
          description: Connectors in this page.
        nextPageToken:
          type: string
          title: Nextpagetoken
          description: >-
            Token for retrieving the next page, or empty when this is the last
            page.
          default: ''
      type: object
      title: ListConnectorsResponse
      description: Response containing one page of connectors.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    Connector-Output:
      properties:
        name:
          type: string
          pattern: >-
            ^workspaces/[a-z0-9](?:[a-z0-9._~-]*[a-z0-9])?/connectors/[a-z0-9](?:[a-z0-9._~-]*[a-z0-9])?$
          title: Name
          description: |-
            Resource name in the form
            `workspaces/{workspace}/connectors/{connector}`.
        spec:
          $ref: '#/components/schemas/ConnectorSpec-Output'
          description: Recipe used to create connector sessions.
        createTime:
          anyOf:
            - type: string
            - type: 'null'
          title: Createtime
          description: Time at which the connector was created.
        updateTime:
          anyOf:
            - type: string
            - type: 'null'
          title: Updatetime
          description: Time at which the connector was most recently updated.
        revision:
          type: string
          title: Revision
          description: Monotonically increasing revision of this connector specification.
          default: '0'
        revisionHash:
          type: string
          title: Revisionhash
          description: |-
            Opaque lowercase SHA-256 fingerprint identifying the persisted
            connector-definition revision.
          default: ''
      type: object
      required:
        - spec
        - name
      title: Connector
      description: A named, reusable source connector owned by the workspace.
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
    ConnectorSpec-Output:
      properties:
        adbc:
          anyOf:
            - $ref: '#/components/schemas/AdbcConnectorSpec-Output'
            - type: 'null'
          description: >-
            An ADBC connector.

            Only one of the fields can be specified with: ["adbc", "s3", "gcs",
            "snowflake", "databricks"] (oneof connector)
        s3:
          anyOf:
            - $ref: '#/components/schemas/S3ConnectorSpec-Output'
            - type: 'null'
          description: >-
            An Amazon S3 connector.

            Only one of the fields can be specified with: ["adbc", "s3", "gcs",
            "snowflake", "databricks"] (oneof connector)
        gcs:
          anyOf:
            - $ref: '#/components/schemas/GcsConnectorSpec'
            - type: 'null'
          description: >-
            A Google Cloud Storage connector.

            Only one of the fields can be specified with: ["adbc", "s3", "gcs",
            "snowflake", "databricks"] (oneof connector)
        snowflake:
          anyOf:
            - $ref: '#/components/schemas/SnowflakeConnectorSpec-Output'
            - type: 'null'
          description: >-
            A native Snowflake connector.

            Only one of the fields can be specified with: ["adbc", "s3", "gcs",
            "snowflake", "databricks"] (oneof connector)
        databricks:
          anyOf:
            - $ref: '#/components/schemas/DatabricksConnectorSpec-Output'
            - type: 'null'
          description: >-
            A native Databricks connector.

            Only one of the fields can be specified with: ["adbc", "s3", "gcs",
            "snowflake", "databricks"] (oneof connector)
      type: object
      title: ConnectorSpec
      description: >-
        A source connector recipe stored in the workspace connector registry.


        ADBC, Snowflake, and Databricks expose relational catalogs. S3 and
        Google

        Cloud Storage expose object stores. Workspace resources may reference a

        connector only through the capability selected by this oneof.
    AdbcConnectorSpec-Output:
      properties:
        direct:
          anyOf:
            - $ref: '#/components/schemas/AdbcDirectDatabaseSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["direct",
            "connection_profile", "snowflake", "databricks"] (oneof database)
        connectionProfile:
          anyOf:
            - $ref: '#/components/schemas/AdbcConnectionProfileSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["direct",
            "connection_profile", "snowflake", "databricks"] (oneof database)
        snowflake:
          anyOf:
            - $ref: '#/components/schemas/SnowflakeAdbcConnectionSpec-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["direct",
            "connection_profile", "snowflake", "databricks"] (oneof database)
        databricks:
          anyOf:
            - $ref: '#/components/schemas/DatabricksAdbcConnectionSpec-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["direct",
            "connection_profile", "snowflake", "databricks"] (oneof database)
        databaseOptions:
          items:
            $ref: '#/components/schemas/AdbcDatabaseOption-Output'
          type: array
          title: Databaseoptions
        entrypoint:
          anyOf:
            - type: string
              minLength: 1
              pattern: ^[^\x00]+$
            - type: 'null'
          title: Entrypoint
        adbcVersion:
          anyOf:
            - $ref: '#/components/schemas/AdbcVersion'
            - type: 'null'
          description: >-
            Omission selects the latest supported ADBC revision (currently
            1.1.0).
        driverLoadFlags:
          anyOf:
            - $ref: '#/components/schemas/AdbcDriverLoadFlags'
            - type: 'null'
          description: >-
            Omission delegates search policy to the driver manager. A present
            empty

            message disables every standardized search flag.
        additionalDriverSearchPaths:
          items:
            type: string
          type: array
          title: Additionaldriversearchpaths
        connectionPool:
          anyOf:
            - $ref: '#/components/schemas/AdbcConnectionPoolSpec'
            - type: 'null'
        identifierQuoteStyle:
          anyOf:
            - $ref: '#/components/schemas/AdbcIdentifierQuoteStyle'
            - type: 'null'
          description: Omission leaves identifiers unquoted during SQL pushdown.
      type: object
      title: AdbcConnectorSpec
      description: |-
        An Apache Arrow Database Connectivity driver-manager recipe.

        Direct and connection-profile variants expose the generic ADBC surface.
        Snowflake and Databricks are convenience profiles that lower to the same
        driver-manager path; they are not native vendor clients.
    S3ConnectorSpec-Output:
      properties:
        objectStoreUrl:
          type: string
          pattern: ^s3a?://[a-z0-9](?:[a-z0-9._~-]*[a-z0-9])?/$
          title: Objectstoreurl
          description: Canonical registration identity for exactly one bucket.
        credentials:
          $ref: '#/components/schemas/AwsCredentialsSpec-Output'
        options:
          additionalProperties:
            type: string
          propertyNames:
            minLength: 1
          type: object
          title: Options
          description: >-
            Additional non-credential options accepted by the Rust
            `object_store`

            crate. Each key is parsed as `object_store::aws::AmazonS3ConfigKey`
            and

            each value is passed to `AmazonS3Builder::with_config`.
      type: object
      required:
        - objectStoreUrl
        - credentials
      title: S3ConnectorSpec
      description: An Amazon S3 object-store connector.
    GcsConnectorSpec:
      properties:
        objectStoreUrl:
          type: string
          pattern: >-
            ^gs://[a-z0-9](?:[a-z0-9_-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9_-]{0,61}[a-z0-9])?)*/$
          title: Objectstoreurl
          description: Canonical registration identity for exactly one bucket.
        options:
          additionalProperties:
            type: string
          propertyNames:
            minLength: 1
          type: object
          title: Options
          description: >-
            Additional non-secret options accepted by the Rust `object_store`
            crate.

            Each key is parsed as `object_store::gcp::GoogleConfigKey` and each
            value

            is passed to `GoogleCloudStorageBuilder::with_config`.
        secrets:
          additionalProperties:
            type: string
          propertyNames:
            minLength: 1
          type: object
          title: Secrets
          description: >-
            Secret options from that same `object_store::gcp::GoogleConfigKey`

            namespace (for example `service_account_key`). This field is
            separate so

            callers can redact or protect its values; both maps configure the
            same

            `GoogleCloudStorageBuilder`.
      type: object
      required:
        - objectStoreUrl
      title: GcsConnectorSpec
      description: A Google Cloud Storage object-store connector.
    SnowflakeConnectorSpec-Output:
      properties:
        endpoint:
          type: string
          pattern: ^https://[^/?#@]+/?$
          title: Endpoint
          description: Base URI of the Snowflake account, without the SQL API path.
        credential:
          $ref: '#/components/schemas/CredentialProviderSpec-Output'
        authorizationTokenType:
          $ref: '#/components/schemas/SnowflakeAuthorizationTokenType'
        session:
          anyOf:
            - $ref: '#/components/schemas/SnowflakeSessionSpec'
            - type: 'null'
        statementTimeout:
          anyOf:
            - type: string
            - type: 'null'
          title: Statementtimeout
          description: Omission selects 300 seconds.
        workloadIdentityProvider:
          anyOf:
            - $ref: '#/components/schemas/SnowflakeWorkloadIdentityProvider'
            - type: 'null'
          description: >-
            Provider marker embedded in Snowflake's workload-identity bearer
            value.
      type: object
      required:
        - endpoint
        - credential
        - authorizationTokenType
      title: SnowflakeConnectorSpec
      description: A native Snowflake SQL API connection.
    DatabricksConnectorSpec-Output:
      properties:
        workspaceUrl:
          type: string
          pattern: ^https://[^/?#@]+/?$
          title: Workspaceurl
          description: Workspace base URI, without an API path.
        warehouseId:
          type: string
          minLength: 1
          title: Warehouseid
        credential:
          $ref: '#/components/schemas/CredentialProviderSpec-Output'
        defaults:
          anyOf:
            - $ref: '#/components/schemas/DatabricksStatementDefaultsSpec'
            - type: 'null'
        statementTimeout:
          anyOf:
            - type: string
            - type: 'null'
          title: Statementtimeout
          description: Omission selects 300 seconds.
      type: object
      required:
        - workspaceUrl
        - warehouseId
        - credential
      title: DatabricksConnectorSpec
      description: A native Databricks Statement Execution and Unity Catalog connection.
    AdbcDirectDatabaseSpec:
      properties:
        driver:
          type: string
          minLength: 1
          pattern: ^[^\x00]+$
          title: Driver
      type: object
      required:
        - driver
      title: AdbcDirectDatabaseSpec
    AdbcConnectionProfileSpec:
      properties:
        profile:
          type: string
          pattern: ^profile://[^?#]+$
          title: Profile
      type: object
      required:
        - profile
      title: AdbcConnectionProfileSpec
    SnowflakeAdbcConnectionSpec-Output:
      properties:
        account:
          type: string
          pattern: ^[A-Za-z0-9._-]+$
          title: Account
        warehouse:
          type: string
          minLength: 1
          title: Warehouse
        role:
          type: string
          minLength: 1
          title: Role
        credential:
          $ref: '#/components/schemas/CredentialProviderSpec-Output'
      type: object
      required:
        - account
        - warehouse
        - role
        - credential
      title: SnowflakeAdbcConnectionSpec
      description: A typed Snowflake ADBC option profile.
    DatabricksAdbcConnectionSpec-Output:
      properties:
        sqlEndpoint:
          type: string
          pattern: ^https?://[^/?#@]+/.+$
          title: Sqlendpoint
        credential:
          $ref: '#/components/schemas/CredentialProviderSpec-Output'
      type: object
      required:
        - sqlEndpoint
        - credential
      title: DatabricksAdbcConnectionSpec
      description: A typed Databricks ADBC option profile.
    AdbcDatabaseOption-Output:
      properties:
        name:
          type: string
          minLength: 1
          pattern: ^[^\x00]*[^\s\x00][^\x00]*$
          title: Name
        value:
          $ref: '#/components/schemas/AdbcDatabaseOptionSpec-Output'
      type: object
      required:
        - name
        - value
      title: AdbcDatabaseOption
      description: >-
        One driver-specific ADBC database option. Credential values are resolved

        only when a database is opened and participate in refresh/expiry
        handling.
    AdbcVersion:
      type: string
      enum:
        - ADBC_VERSION_UNSPECIFIED
        - ADBC_VERSION_1_0_0
        - ADBC_VERSION_1_1_0
      title: AdbcVersion
    AdbcDriverLoadFlags:
      properties:
        values:
          items:
            $ref: '#/components/schemas/AdbcDriverLoadFlag'
          type: array
          title: Values
      type: object
      title: AdbcDriverLoadFlags
    AdbcConnectionPoolSpec:
      properties:
        maxSize:
          type: integer
          exclusiveMinimum: 0
          title: Maxsize
        minIdle:
          anyOf:
            - type: integer
            - type: 'null'
          title: Minidle
      type: object
      required:
        - maxSize
      title: AdbcConnectionPoolSpec
    AdbcIdentifierQuoteStyle:
      type: string
      enum:
        - ADBC_IDENTIFIER_QUOTE_STYLE_UNSPECIFIED
        - ADBC_IDENTIFIER_QUOTE_STYLE_DOUBLE_QUOTE
        - ADBC_IDENTIFIER_QUOTE_STYLE_BACKTICK
      title: AdbcIdentifierQuoteStyle
    AwsCredentialsSpec-Output:
      properties:
        region:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Region
          description: Omission delegates region selection to the AWS SDK provider chain.
        default:
          anyOf:
            - $ref: '#/components/schemas/AwsDefaultCredentials'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["default", "profile",
            "static", "session", "assume_role"] (oneof provider)
        profile:
          anyOf:
            - $ref: '#/components/schemas/AwsProfileCredentials'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["default", "profile",
            "static", "session", "assume_role"] (oneof provider)
        static:
          anyOf:
            - $ref: '#/components/schemas/AwsStaticCredentials'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["default", "profile",
            "static", "session", "assume_role"] (oneof provider)
        session:
          anyOf:
            - $ref: '#/components/schemas/AwsSessionCredentials'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["default", "profile",
            "static", "session", "assume_role"] (oneof provider)
        assumeRole:
          anyOf:
            - $ref: '#/components/schemas/AwsAssumeRoleCredentials-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["default", "profile",
            "static", "session", "assume_role"] (oneof provider)
      type: object
      title: AwsCredentialsSpec
      description: How a runtime resolves AWS credentials.
    CredentialProviderSpec-Output:
      properties:
        staticBearer:
          anyOf:
            - $ref: '#/components/schemas/StaticBearerCredentialProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["static_bearer",
            "federated_identity", "oauth_client_credentials"] (oneof provider)
        federatedIdentity:
          anyOf:
            - $ref: '#/components/schemas/FederatedIdentityProviderSpec-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["static_bearer",
            "federated_identity", "oauth_client_credentials"] (oneof provider)
        oauthClientCredentials:
          anyOf:
            - $ref: '#/components/schemas/OAuthClientCredentialsProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["static_bearer",
            "federated_identity", "oauth_client_credentials"] (oneof provider)
      type: object
      title: CredentialProviderSpec
      description: A recipe for obtaining the bearer credential consumed by a connector.
    SnowflakeAuthorizationTokenType:
      type: string
      enum:
        - SNOWFLAKE_AUTHORIZATION_TOKEN_TYPE_UNSPECIFIED
        - SNOWFLAKE_AUTHORIZATION_TOKEN_TYPE_OAUTH
        - SNOWFLAKE_AUTHORIZATION_TOKEN_TYPE_KEYPAIR_JWT
        - SNOWFLAKE_AUTHORIZATION_TOKEN_TYPE_PROGRAMMATIC_ACCESS_TOKEN
        - SNOWFLAKE_AUTHORIZATION_TOKEN_TYPE_WORKLOAD_IDENTITY_FEDERATION
      title: SnowflakeAuthorizationTokenType
      description: Value sent in X-Snowflake-Authorization-Token-Type.
    SnowflakeSessionSpec:
      properties:
        warehouse:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Warehouse
        database:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Database
        schema:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Schema
        role:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Role
      type: object
      title: SnowflakeSessionSpec
    SnowflakeWorkloadIdentityProvider:
      type: string
      enum:
        - SNOWFLAKE_WORKLOAD_IDENTITY_PROVIDER_UNSPECIFIED
        - SNOWFLAKE_WORKLOAD_IDENTITY_PROVIDER_AWS
        - SNOWFLAKE_WORKLOAD_IDENTITY_PROVIDER_AZURE
        - SNOWFLAKE_WORKLOAD_IDENTITY_PROVIDER_GCP
        - SNOWFLAKE_WORKLOAD_IDENTITY_PROVIDER_OIDC
      title: SnowflakeWorkloadIdentityProvider
      description: >-
        Identity provider named in Snowflake's `WIF.{provider}.{token}` bearer
        value.
    DatabricksStatementDefaultsSpec:
      properties:
        catalog:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Catalog
        schema:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Schema
      type: object
      title: DatabricksStatementDefaultsSpec
    AdbcDatabaseOptionSpec-Output:
      properties:
        literal:
          anyOf:
            - $ref: '#/components/schemas/AdbcDatabaseOptionValue-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["literal",
            "credential"] (oneof value)
        credential:
          anyOf:
            - $ref: '#/components/schemas/CredentialProviderSpec-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["literal",
            "credential"] (oneof value)
      type: object
      title: AdbcDatabaseOptionSpec
    AdbcDriverLoadFlag:
      type: string
      enum:
        - ADBC_DRIVER_LOAD_FLAG_UNSPECIFIED
        - ADBC_DRIVER_LOAD_FLAG_SEARCH_ENV
        - ADBC_DRIVER_LOAD_FLAG_SEARCH_USER
        - ADBC_DRIVER_LOAD_FLAG_SEARCH_SYSTEM
        - ADBC_DRIVER_LOAD_FLAG_ALLOW_RELATIVE_PATHS
      title: AdbcDriverLoadFlag
    AwsDefaultCredentials:
      properties: {}
      type: object
      title: AwsDefaultCredentials
      description: Uses the AWS SDK default credential provider chain.
    AwsProfileCredentials:
      properties:
        profileName:
          type: string
          minLength: 1
          title: Profilename
      type: object
      required:
        - profileName
      title: AwsProfileCredentials
      description: Uses one profile from the shared AWS configuration files.
    AwsStaticCredentials:
      properties:
        accessKeyId:
          type: string
          minLength: 1
          title: Accesskeyid
        secretAccessKey:
          type: string
          minLength: 1
          title: Secretaccesskey
      type: object
      required:
        - accessKeyId
        - secretAccessKey
      title: AwsStaticCredentials
      description: Uses a long-lived access-key pair.
    AwsSessionCredentials:
      properties:
        accessKeyId:
          type: string
          minLength: 1
          title: Accesskeyid
        secretAccessKey:
          type: string
          minLength: 1
          title: Secretaccesskey
        sessionToken:
          type: string
          minLength: 1
          title: Sessiontoken
      type: object
      required:
        - accessKeyId
        - secretAccessKey
        - sessionToken
      title: AwsSessionCredentials
      description: Uses temporary AWS session credentials.
    AwsAssumeRoleCredentials-Output:
      properties:
        roleArn:
          type: string
          maxLength: 2048
          minLength: 20
          pattern: >-
            ^arn:[a-z0-9-]+:iam::[0-9]{12}:role/(?:[A-Za-z0-9_+=,.@-]+/)*[A-Za-z0-9_+=,.@-]{1,64}$
          title: Rolearn
        sessionName:
          type: string
          maxLength: 64
          minLength: 2
          pattern: ^[A-Za-z0-9_+=,.@-]+$
          title: Sessionname
        externalId:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Externalid
        duration:
          anyOf:
            - type: string
            - type: 'null'
          title: Duration
          description: Omission selects one hour.
      type: object
      required:
        - roleArn
        - sessionName
      title: AwsAssumeRoleCredentials
      description: Assumes an IAM role from the AWS SDK default credential provider chain.
    StaticBearerCredentialProviderSpec:
      properties:
        token:
          type: string
          minLength: 1
          title: Token
      type: object
      required:
        - token
      title: StaticBearerCredentialProviderSpec
      description: A long-lived bearer token supplied by the runtime owner.
    FederatedIdentityProviderSpec-Output:
      properties:
        subjectToken:
          $ref: '#/components/schemas/SubjectTokenProviderSpec-Output'
        accessToken:
          $ref: '#/components/schemas/AccessTokenProviderSpec'
      type: object
      required:
        - subjectToken
        - accessToken
      title: FederatedIdentityProviderSpec
      description: >-
        A two-stage workload-identity exchange.


        Runtime implementations expose async get_subject_token() and

        get_access_token(subject_token). Implementing both stages also provides
        the

        default CredentialProvider behavior that chains those calls.
    OAuthClientCredentialsProviderSpec:
      properties:
        tokenEndpoint:
          type: string
          title: Tokenendpoint
        clientId:
          type: string
          minLength: 1
          title: Clientid
        clientSecret:
          type: string
          minLength: 1
          title: Clientsecret
        scopes:
          items:
            type: string
            minLength: 1
          type: array
          title: Scopes
        audience:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Audience
        resource:
          anyOf:
            - type: string
            - type: 'null'
          title: Resource
        authenticationMethod:
          $ref: '#/components/schemas/ClientAuthenticationMethod'
      type: object
      required:
        - tokenEndpoint
        - clientId
        - clientSecret
        - authenticationMethod
      title: OAuthClientCredentialsProviderSpec
      description: |-
        Obtains a connector-ready access token with the OAuth 2.0 client
        credentials grant.
    AdbcDatabaseOptionValue-Output:
      properties:
        integer:
          anyOf:
            - type: string
            - type: 'null'
          title: Integer
          description: >-
            Only one of the fields can be specified with: ["integer", "double",
            "string", "bytes_"] (oneof value)
        double:
          anyOf:
            - type: number
            - type: 'null'
          title: Double
          description: >-
            Only one of the fields can be specified with: ["integer", "double",
            "string", "bytes_"] (oneof value)
        string:
          anyOf:
            - type: string
              pattern: ^[^\x00]*$
            - type: 'null'
          title: String
          description: >-
            Only one of the fields can be specified with: ["integer", "double",
            "string", "bytes_"] (oneof value)
        bytes:
          anyOf:
            - type: string
              contentEncoding: base64
              contentMediaType: application/octet-stream
            - type: 'null'
          title: Bytes
          description: >-
            Only one of the fields can be specified with: ["integer", "double",
            "string", "bytes_"] (oneof value)
      type: object
      title: AdbcDatabaseOptionValue
    SubjectTokenProviderSpec-Output:
      properties:
        awsSts:
          anyOf:
            - $ref: '#/components/schemas/AwsStsSubjectTokenProviderSpec-Output'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["aws_sts",
            "jwt_file", "http_jwt"] (oneof provider)
        jwtFile:
          anyOf:
            - $ref: '#/components/schemas/JwtFileSubjectTokenProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["aws_sts",
            "jwt_file", "http_jwt"] (oneof provider)
        httpJwt:
          anyOf:
            - $ref: '#/components/schemas/HttpJwtSubjectTokenProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["aws_sts",
            "jwt_file", "http_jwt"] (oneof provider)
      type: object
      title: SubjectTokenProviderSpec
      description: A recipe for minting the subject token used by a federation exchange.
    AccessTokenProviderSpec:
      properties:
        passthrough:
          anyOf:
            - $ref: '#/components/schemas/PassthroughAccessTokenProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["passthrough",
            "oauth_token_exchange"] (oneof provider)
        oauthTokenExchange:
          anyOf:
            - $ref: '#/components/schemas/OAuthTokenExchangeProviderSpec'
            - type: 'null'
          description: >-
            Only one of the fields can be specified with: ["passthrough",
            "oauth_token_exchange"] (oneof provider)
      type: object
      title: AccessTokenProviderSpec
      description: A recipe for exchanging a subject token for a connector credential.
    ClientAuthenticationMethod:
      type: string
      enum:
        - CLIENT_AUTHENTICATION_METHOD_UNSPECIFIED
        - CLIENT_AUTHENTICATION_METHOD_CLIENT_SECRET_BASIC
        - CLIENT_AUTHENTICATION_METHOD_CLIENT_SECRET_POST
      title: ClientAuthenticationMethod
    AwsStsSubjectTokenProviderSpec-Output:
      properties:
        credentials:
          $ref: '#/components/schemas/AwsCredentialsSpec-Output'
        audience:
          type: string
          minLength: 1
          title: Audience
        signingAlgorithm:
          $ref: '#/components/schemas/AwsStsSigningAlgorithm'
      type: object
      required:
        - credentials
        - audience
        - signingAlgorithm
      title: AwsStsSubjectTokenProviderSpec
      description: Produces a signed OIDC token through AWS STS GetWebIdentityToken.
    JwtFileSubjectTokenProviderSpec:
      properties:
        fileUri:
          type: string
          pattern: ^file:///
          title: Fileuri
      type: object
      required:
        - fileUri
      title: JwtFileSubjectTokenProviderSpec
      description: |-
        Reads a JWT subject token from an absolute file URI. The token's `exp`
        claim controls credential refresh.
    HttpJwtSubjectTokenProviderSpec:
      properties:
        endpoint:
          type: string
          pattern: ^https?://
          title: Endpoint
        headers:
          additionalProperties:
            type: string
          propertyNames:
            minLength: 1
          type: object
          title: Headers
      type: object
      required:
        - endpoint
      title: HttpJwtSubjectTokenProviderSpec
      description: >-
        Fetches a raw JWT subject token from an HTTP metadata or
        workload-identity

        endpoint. The token's `exp` claim controls credential refresh.
    PassthroughAccessTokenProviderSpec:
      properties: {}
      type: object
      title: PassthroughAccessTokenProviderSpec
      description: Uses the subject token itself as the connector credential.
    OAuthTokenExchangeProviderSpec:
      properties:
        tokenEndpoint:
          type: string
          title: Tokenendpoint
        clientId:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Clientid
        clientSecret:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Clientsecret
        scopes:
          items:
            type: string
            minLength: 1
          type: array
          title: Scopes
        audience:
          anyOf:
            - type: string
              minLength: 1
            - type: 'null'
          title: Audience
        resource:
          anyOf:
            - type: string
            - type: 'null'
          title: Resource
        subjectTokenType:
          anyOf:
            - type: string
            - type: 'null'
          title: Subjecttokentype
          description: Omission selects urn:ietf:params:oauth:token-type:jwt.
      type: object
      required:
        - tokenEndpoint
      title: OAuthTokenExchangeProviderSpec
      description: Exchanges a subject token according to RFC 8693.
    AwsStsSigningAlgorithm:
      type: string
      enum:
        - AWS_STS_SIGNING_ALGORITHM_UNSPECIFIED
        - AWS_STS_SIGNING_ALGORITHM_RS256
        - AWS_STS_SIGNING_ALGORITHM_ES384
      title: AwsStsSigningAlgorithm
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: API key or OAuth2/OIDC access token
      description: >-
        An API key or OAuth2/OIDC access token sent as `Authorization: Bearer
        <token>`.

````