The installation's settings as one document, without a value
The operator (installation.settings.manage, the workspace owner), signed in; an API key is 403 whatever its scopes. The provider connections, repositories and remote MCP servers the database holds, each entry in the shape the document holds it; disabled and removed rows are left out, so this is the active settings to copy, not a backup. An env or Secrets Manager reference comes back as its name (value_env, secret_id); a value the database stores as stored: true and its last4, never the value. Execution ceilings are not in it. digest is the SHA-256 of the document's canonical JSON, last4 included. Changes nothing.
Auth: cookie session only; no scope.
cookieSession__Host-werft_session<token>For the web console: the browser session cookie set by POST /v1/auth/login. It holds the scopes of the user's workspace role (owner: all; admin and member: all but sessions:recover). Requests other than GET must also send X-Requested-With: werft-web.
The document and its digest.
application/json- response
document*digest*string^sha256:[0-9a-f]{64}$curl -X GET 'https://example.com/v1/installation/settings/export'{ "document": { "version": 1, "connections": { "anthropic-main": { "kind": "anthropic", "endpoint": "https://api.anthropic.com", "auth": { "kind": "api_key", "value_env": "ANTHROPIC_API_KEY" } }, "anthropic-console": { "kind": "anthropic", "endpoint": "https://api.anthropic.com", "auth": { "kind": "api_key", "stored": true, "last4": "x9Qa" } } }, "repositories": { "docs-site": { "url": "https://github.com/acme/docs-site.git", "branch": "main", "auth": { "kind": "github_app" } } }, "mcp_servers": {} }, "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"}