# Integrations: Save a provider API key

Contract status: **human-session only**.
Launch state: **Live**.

Encrypts a provider API key for the authenticated tenant and returns only its fingerprint and verification state.

Operation ID: `completeHumanAgentIntegrationCredentialHandoff`
Method and path: `POST /api/account/agent-integrations/{attemptId}/credential`
Domain owner: `integration`
Authentication class: **human session**
Required scope: `human session`
Idempotency required: **yes**
Availability in the generated contract: **available**
Reason code: `human_session_only`

The route is implemented. Availability is account-specific and can change after this document is fetched.

This endpoint uses the signed-in human web session. An agent bearer token cannot call it.

Request schema: `completeHumanAgentIntegrationCredentialHandoff.request.v1`.

Response schema: `completeHumanAgentIntegrationCredentialHandoff.response.v1`.

## Transport projections

- REST: **implemented** at `https://neotask.ai/api/account`.
- MCP: **not_exposed** (reason `human_session_only`).
- CLI: **not_exposed** (reason `human_session_only`).

Read [authenticated capabilities](https://neotask.ai/api/agent/v1/capabilities) before using this operation.