Run one described query under a passwordless credential

POST

/provision/databases/{id}/passwordless/query

The same credential forms and checks as …/passwordless/exchange (v1
signed grant in credential, or a v2 device-signed request holding
passwordless:use). The query is described — select, insert,
update, delete — never SQL, and is checked against the grant and
then the ceiling (tables and columns) before a pooled connection is
taken. It runs through the same gateway as the data plane: one pool,
one circuit breaker, one query log.

Capability: none from the table; the credential is its own (see above). A signed grant (v1) or passwordless:use (v2).

Request

Authorization

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

The rows

Bodyapplication/json

🟠400

🟠401

🟠403

🟠404

🟠429

🔴503

🟠423SessionFrozen

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.prod-orm.io/provision/databases//passwordless/query' \
--header 'Content-Type: application/json' \
--data '{
    "sessionId": "f6567dd8-e069-418e-8893-7d22fcf12459",
    "credential": "string",
    "scope": {
        "ops": [
            "read"
        ],
        "tables": [
            "string"
        ]
    },
    "query": {
        "select": {
            "from": "string",
            "attributes": [
                "string"
            ],
            "where": {},
            "order": [
                [
                    "string"
                ]
            ],
            "limit": 0,
            "offset": 0
        },
        "insert": {
            "into": "string",
            "values": {}
        },
        "update": {
            "table": "string",
            "set": {},
            "where": {}
        },
        "delete": {
            "from": "string",
            "where": {}
        }
    }
}'

Response Example

200 - Example 1

{
    "rows": [
        {}
    ],
    "meta": {},
    "statement": "string",
    "durationMs": 0,
    "pool": "589fb5a8-7b38-4f54-b549-8c6be04c7d1d",
    "attempts": 0
}

Modified at 2026-10-05 14:01:12

Check a passwordless credential

The database's roles