Skip to main content
POST

Authorizations

​
Authorization
string
header
required

API key starting with sk_case_

Headers

​
x-case-connector-subject
string

Trusted server-to-server application-user assertion. Derive it from the authenticated application session, never browser input. Omit only for the legacy organization-scoped namespace.

Pattern: ^[A-Za-z0-9_-]{1,255}$

Body

application/json
​
provider
enum<string>
required
Available options:
box,
clio,
dropbox,
gdrive,
microsoft,
smokeball
​
return_url
string
required

HTTPS URL the user is sent back to after consent.

​
scope_tier
enum<string>

Provider-specific OAuth permission tier. Omit to use the provider's default. Microsoft defaults to organizational OneDrive/SharePoint; use microsoft.personal.read for a personal Microsoft account's own OneDrive. Microsoft write tiers are a separately gated private pilot; exports and paired sync are not yet available.

Available options:
box.readwrite,
box.readwrite.webhooks,
clio.us,
dropbox.readwrite,
drive,
microsoft.read,
microsoft.personal.read,
microsoft.write,
microsoft.personal.write,
smokeball.us,
smokeball.us.staging,
smokeball.us.staging.write,
smokeball.us.write

Response

Pending connection created

​
connection_id
string
​
connect_url
string
​
expires_at
string