Agent-ready OpenAPI document · curated by JenticDeveloper ToolsPackage Registryhmac38 EndpointsREST
Know of an official OpenAPI document? Contribute it →
For Agents
Manage AWS CodeArtifact domains, repositories, and package versions across npm, PyPI, Maven, and NuGet, plus mint authorization tokens for build-time access. Backed by 38 endpoints spanning domain, repository, and package operations.
Use for: I need to create a CodeArtifact repository in an existing domain, Mint a CodeArtifact authorization token for an npm install in CI, Copy a package version from a staging repository to a production repository, List all package versions of an internal Python package
Not supported: Does not handle source code hosting, container image storage, or build orchestration - use for npm, PyPI, Maven, NuGet, Swift, and generic package repository management only.
Jentic publishes the only available OpenAPI specification for AWS CodeArtifact, keeping it validated and agent-ready. AWS CodeArtifact is a managed artifact repository for npm, PyPI, Maven, NuGet, generic, and Swift packages. The API covers domains, repositories, package versions, upstream connections, and authorization tokens, so an agent can publish, retrieve, copy, and clean up packages across an organization without managing repository servers.
Install Jentic One Beta
Connect the AWS CodeArtifact to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS CodeArtifact, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Fcodeartifact" | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Fcodeartifact" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with AWS CodeArtifact API.
Create and configure CodeArtifact domains and repositories with upstream sources
Publish, copy, and dispose package versions across npm, PyPI, Maven, NuGet, and Swift formats
Mint short-lived authorization tokens for CI builds via GetAuthorizationToken
Associate or disassociate external connections to public registries like npmjs.org or PyPI
Attach and update domain and repository permissions policies for cross-account access
List and describe package versions, including their assets and origin metadata
Tag CodeArtifact domains and repositories for cost allocation and ownership
Use Cases
Patterns agents use AWS CodeArtifact API for, with concrete tasks.
★ Internal Package Registry for npm and PyPI
Engineering teams use CodeArtifact as a private npm and PyPI registry that proxies the public registries through an upstream connection. CreateRepository provisions the registry, AssociateExternalConnection wires up the public mirror, and GetAuthorizationToken issues a 12-hour token that CI runners use as the npm authToken or pip index-url credential. This consolidates package access behind IAM and removes long-lived registry passwords from build pipelines.
Create a repository named internal-npm in domain my-org with the public npm registry as an upstream, then mint an authorization token
Promotion Pipeline Between Staging and Production Repositories
Teams that gate releases through manual or automated approvals publish first to a staging CodeArtifact repository and then promote approved versions with CopyPackageVersions. The API copies specific versions between repositories within the same domain, preserving asset hashes. ListPackageVersions and DescribePackageVersion let an agent confirm the version exists and is in the expected state before promotion.
Copy version 1.4.2 of package internal-utils from repository staging to repository prod inside domain my-org
Vulnerability Cleanup Across Repositories
When a CVE is announced in a transitive dependency, an agent uses ListPackageVersions to find every cached copy and DeletePackageVersions or DisposePackageVersions to remove or mark them. This prevents new builds from pulling the vulnerable version while a fixed version is published. DescribePackage exposes origin configuration so the agent can confirm whether the package is internal or proxied from an upstream.
List versions of package log4j-core in repository internal-maven and dispose any version less than 2.17.1
AI Agent Integration via Jentic
Through Jentic, an AI agent uses CodeArtifact by searching for an intent like 'mint a CodeArtifact authorization token', loading the GetAuthorizationToken schema, and executing it with a domain name. Jentic signs the SigV4 request server-side using IAM credentials in your Jentic One instance.
Search Jentic for 'mint a CodeArtifact authorization token', load the GetAuthorizationToken schema, and execute it for domain my-org with a 12-hour duration
Key Endpoints
38 endpoints — jentic publishes the only available openapi specification for aws codeartifact, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
POST
/v1/domain#domain
Create a new CodeArtifact domain
POST
/v1/repository#domain&repository
Create a repository inside a domain
POST
/v1/authorization-token#domain
Mint a short-lived authorization token
POST
/v1/package/versions/copy#domain&source-repository&destination-repository&format&package
Copy package versions between repositories
POST
/v1/repository/external-connection#domain&repository&external-connection
Connect a repository to a public registry
POST
/v1/package/versions/delete#domain&repository&format&package
Delete specific package versions
GET
/v1/package/version#domain&repository&format&package&version
Describe a single package version
GET
/v1/repository#domain&repository
Describe a repository
POST
/v1/domain#domain
Create a new CodeArtifact domain
POST
/v1/repository#domain&repository
Create a repository inside a domain
POST
/v1/authorization-token#domain
Mint a short-lived authorization token
POST
/v1/package/versions/copy#domain&source-repository&destination-repository&format&package
Copy package versions between repositories
POST
/v1/repository/external-connection#domain&repository&external-connection
Connect a repository to a public registry
POST
/v1/package/versions/delete#domain&repository&format&package
Delete specific package versions
GET
/v1/package/version#domain&repository&format&package&version
Describe a single package version
GET
/v1/repository#domain&repository
Describe a repository
Jentic AI Readiness Score
This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.
C
CodeArtifact
- AI-Aware (B-)62/100
99
Foundational Compliance63
Developer Experience & Jentic Compatibility39
AI-Readiness & Agent Experience94
Agent Usability50
Security100
AI DiscoverabilityPowered by JenticScoring Framework 1.0.0 | Scoring Engine 0.4.0
Show dimension breakdown
99
Foundational Compliance
Base layer of spec validity and structural soundness.
Grade: A+Signals: 4
95%
Lint Results
Aggregated quality score from linter diagnostics, weighted by severity.
100%
Resolution Completeness
Percentage of `$ref` references that resolve successfully.
100%
Specification Validity
Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).
100%
Structural Integrity
Structural correctness score based on schema issues using logarithmic dampening.
63
Developer Experience & Jentic Compatibility
Clarity, completeness, and ingestion readiness for developers and tooling.
Grade: B-Signals: 4
0%
Example Density
How richly the API is illustrated with examples.
100%
Example Validity
Percentage of examples that conform to their schemas.
50%
Response Coverage
Percentage of operations with complete response definitions (success, client error, server error).
100%
Tooling Readiness
Health of API ingestion, bundling, and resolution within Jentic pipelines.
39
AI-Readiness & Agent Experience
Semantic breadth, depth, and agent comprehension for AI systems.
Grade: FSignals: 4
55%
Description Coverage
Coverage of descriptions across API elements.
0%
Error Standardization
Coverage of RFC 9457 Problem Details for error responses.
100%
OperationId Quality
Coverage, uniqueness, and casing consistency of operationIds for AI inference.
0%
Summary Coverage
Coverage of summaries across operations/tags/info.
94
Agent Usability
Functional utility, complexity comfort, and AI orchestration readiness.
Grade: A+Signals: 1
94%
Complexity Comfort
Agent comfort level based on API operational and structural complexity.
50
Security
Trust, risk posture, and security compliance.
Grade: C-Signals: 1
50%
Authentication Strength
Average quality of security schemes based on authentication method strength (weakest link for OAuth2).
100
AI Discoverability
Findability, semantic richness, and reasoning readiness.
Grade: A+Signals: 1
100%
Descriptive Richness
Clarity and depth of descriptions across API elements.
Score it yourself
Every API in the directory is allowlisted, so you can re-score it with no key required.
npx @jentic/api-scorecard-cli score <openapi-url>Why Jentic?
What agents get from Jentic-routed access to this vendor.
Setup
Wiring AWS CodeArtifact by hand means holding an access key ID and secret access key, computing an AWS Signature Version 4 signature per request, resolving the correct regional codeartifact host, and passing domain and repository query parameters and handling retries yourself. Through Jentic you install once, import AWS CodeArtifact from the API Directory, store the AWS access key once, and your agent calls it.
Permission scoping
CodeArtifact passes the domain and repository as query parameters rather than fixed URL path segments, so scope your agent by the operations it needs, such as getting an authorization token or reading a package version. You choose which operations it may call, so changes like copying or deleting package versions are not included unless you add them.
Credential isolation
Your AWS access key ID and secret access key are stored once, encrypted, by your own Jentic One instance, and the Signature Version 4 signature is computed at execution time. The raw keys never enter the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'mint a CodeArtifact authorization token' or 'copy a package version between repositories', and Jentic returns the matching CodeArtifact operation with its input schema so the agent calls the right endpoint without crawling the AWS reference.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using AWS CodeArtifact API through Jentic.
Why is there no official OpenAPI spec for AWS CodeArtifact?
AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call AWS CodeArtifact via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.
What authentication does the AWS CodeArtifact API use?
CodeArtifact uses AWS Signature Version 4 (HMAC) signed requests with an IAM access key ID and secret. For package manager (npm, pip, mvn) access, GetAuthorizationToken returns a separate short-lived bearer token. Through Jentic, IAM credentials live in your Jentic One instance and SigV4 signing happens server-side.
Can I copy package versions between repositories with this API?
Yes. Call CopyPackageVersions with the source-repository, destination-repository, format (npm, pypi, maven, nuget, generic, swift), package name, and an array of versions. Both repositories must live in the same domain and the agent's IAM principal needs codeartifact:CopyPackageVersions on both.
How long does a CodeArtifact authorization token last?
GetAuthorizationToken accepts a durationSeconds value between 900 (15 minutes) and 43200 (12 hours), defaulting to 12 hours. Set durationSeconds to 0 to inherit the maximum session duration of the calling IAM role. The token is scoped to the domain, not a specific repository.
What are the rate limits for the AWS CodeArtifact API?
AWS enforces per-account, per-region throttling on CodeArtifact control-plane calls; throttled requests return ThrottlingException. Package read operations through the package manager endpoints are billed and throttled separately from the management API. Use exponential backoff via the AWS SDKs that Jentic wraps.
How do I publish to a CodeArtifact repository through Jentic with an AI agent?
Run pip install jentic, then have the agent search for 'mint a CodeArtifact authorization token', load the GetAuthorizationToken schema, and execute it. The returned token can then be exported as the CODEARTIFACT_AUTH_TOKEN env var for npm, pip, or Maven publish commands.
Can I limit what my agent is allowed to do with the AWS CodeArtifact API?
Yes. Because you run Jentic One yourself, your own rules decide which CodeArtifact operations and AWS credentials the agent may use. CodeArtifact takes the domain and repository as query parameters rather than fixed URL paths, so you scope the agent to only the operations it needs, such as getting an authorization token or describing a package version. Higher-impact actions like copying or deleting package versions stay out of reach unless you explicitly grant them.
GET STARTED