Create a HarnessRelease

Publishes an Organization-owned, immutable HarnessRelease from a digest-pinned OCI image plus its platform, entrypoint, arguments, non-secret configuration schema, and optional closed set of model wire dialects; image tags are rejected. A declared dialect set is enforced against the ModelRoutingProfile candidate ladder at Run admission, while omission preserves the unconstrained legacy behavior. Configuration is deliberately non-secret — never place model keys or gateway tokens in it. npm, Git, URL, and Dockerfile inputs are import or build recipes that must resolve to a content-addressed release before use. Returns the release with 201; send Idempotency-Key to make retries safe.

Checkfu support posture: alpha; hosted. Required evidence journey: harness-registry. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities.

POST /v1/organizations/{organization_id}/harness-releases

Create a HarnessRelease

cURL

curl --request POST \
  --url https://api.checkfu.com/v1/organizations/{organization_id}/harness-releases \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'checkfu-version: <checkfu-version>' \
  --data '
{
  "image": "<string>",
  "entrypoint": "<string>",
  "working_directory": "<string>",
  "configuration_schema": true,
  "model_wire_dialects": [],
  "argv": "<unknown>",
  "prompt_transport": "<unknown>",
  "output_mode": "<unknown>",
  "resume_flag": "<unknown>",
  "output_schema_flag": "<unknown>",
  "output_schema_transport": "<unknown>",
  "managed_adapter_release": "<unknown>",
  "protocol": "acp-v1",
  "arguments": [
    "<string>"
  ]
}
'

201

{
  "id": "<string>",
  "organization_id": "<string>",
  "digest": "<string>",
  "artifact": {
    "kind": "managed",
    "protocol": "mock",
    "preset": "<string>",
    "adapter_version": "<string>",
    "recipe_digest": "<string>"
  },
  "configuration_schema": true,
  "created_at": "<string>",
  "source_provenance": {
    "kind": "github",
    "repository": "<string>",
    "commit_sha": "<string>",
    "runner_id": "<string>",
    "build_id": "<string>"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

checkfu-version · enum<string> · required

Available options: 2026-08-27

idempotency-key · string

Maximum string length: 255

Path Parameters

organization_id · string · required

Pattern: ^org_[0-9a-f]{32}$

Body

application/json

Option 1

Option 2

image · string · required

entrypoint · string · required

Maximum string length: 4096

Pattern: ^\/(?!\.{1,2}(?:\/|$))[A-Za-z0-9._-]+(?:\/(?!\.{1,2}(?:\/|$))[A-Za-z0-9._-]+)*$

working_directory · string

Maximum string length: 4096

Pattern: ^\/(?!\.{1,2}(?:\/|$))[A-Za-z0-9._-]+(?:\/(?!\.{1,2}(?:\/|$))[A-Za-z0-9._-]+)*$

platform · object

Show child attributes

configuration_schema · boolean object

model_wire_dialects · enum<string>[]

Required array length: 1 - 4 elements

Available options: anthropic_messages, openai_chat, openai_responses, fal_queue

argv · any

prompt_transport · any

output_mode · any

resume_flag · any

output_schema_flag · any

output_schema_transport · any

managed_adapter_release · any

protocol · enum<string>

Available options: acp-v1

arguments · string[]

At most 256 exact process arguments and 131072 aggregate UTF-8 bytes including one terminator per argument

Maximum array length: 256

Exact process argument text, preserving whitespace; U+0000 is forbidden and UTF-8 encoding is limited to 65536 bytes

Maximum string length: 65536

Pattern: ^[^\u0000]*$

mcp_delivery · enum<string>

Available options: session_http, none

Response

201

application/json

Success

id · string · required

Pattern: ^hrel_[0-9a-f]{32}$

organization_id · string · required

Pattern: ^org_[0-9a-f]{32}$

digest · string · required

Pattern: ^sha256:[0-9a-f]{64}$

artifact · object · required

Option 1

Option 2

Option 3

Show child attributes

configuration_schema · boolean object · required

created_at · string · required

source_provenance · object

Show child attributes