> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Fingerprint an accessible profile version

> Requires live profiles.read, profiles.write (publication), or profiles.share (recipient management) permission, intersected with token scopes. Catalogue publication does not grant deployment permission, approve hosted operation, or assert runtime readiness. Shared metadata can remain visible after underlying profile access is revoked; contract reads then return 404. Profile fingerprints are rechecked on contract reads.



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /org/service-packages/profile-pins/{profile_id}/{profile_version_id}
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
tags:
  - name: Clusters
    description: Create, inspect and manage clusters, and the stacks deployed on them.
  - name: Managed Clusters
    description: Provider-managed control planes, driven through one common surface.
  - name: Imported Clusters
    description: Clusters that already existed and were connected to Ankra.
  - name: Cluster Access
    description: Kubeconfigs, service-account tokens and per-cluster access grants.
  - name: Kubernetes
    description: Read and act on the Kubernetes objects inside a cluster.
  - name: AWS Clusters
    description: >-
      Provision and manage self-managed k3s / kubeadm clusters on AWS EC2 in
      your own VPC.
  - name: DigitalOcean Clusters
    description: Provision and manage DigitalOcean Kubernetes clusters.
  - name: Hetzner Clusters
    description: Provision and manage Hetzner Kubernetes clusters.
  - name: OVH Clusters
    description: Provision and manage OVH Kubernetes clusters.
  - name: Scaleway Clusters
    description: Provision and manage Scaleway Kapsule clusters.
  - name: UpCloud Clusters
    description: Provision and manage UpCloud Kubernetes clusters.
  - name: Applications
    description: Deploy, configure and observe applications across the fleet.
  - name: Stack Profiles
    description: Reusable stack definitions, their versions and sharing.
  - name: Services
    description: >-
      Versioned service packages and explicit sharing. Runtime admission is
      separate from publication.
  - name: Charts
    description: Browse the chart catalogue behind stacks and addons.
  - name: Helm
    description: Helm registries, credentials and the charts they expose.
  - name: Executions
    description: Long-running platform executions and their jobs.
  - name: Operations
    description: Cancel in-flight cluster operations and their jobs.
  - name: Chat
    description: Conversational sessions, plans and confirmable actions.
  - name: AI Agent Runs
    description: Autonomous agent runs and their outcomes.
  - name: AI Tickets
    description: The AI ticket board, its sync connections and settings.
  - name: AI Playbooks
    description: Reusable playbooks the AI lanes execute.
  - name: AI Conditions
    description: Conditions that gate AI autonomy.
  - name: AI Engineering Handoffs
    description: Work the AI lanes escalate to a human engineer.
  - name: AI Environment
    description: The environment and base stacks AI demos deploy into.
  - name: Security
    description: Findings, advisories, SBOMs, compliance and posture.
  - name: Cost
    description: Cluster and fleet cost, rate cards and cost settings.
  - name: Billing
    description: Subscription and spend caps.
  - name: Organisation
    description: Members, invitations, audit logs and organisation settings.
  - name: Account Tokens
    description: Personal access tokens for the API and CLI.
  - name: Credentials
    description: The shared credential store.
  - name: AWS Credentials
    description: >-
      AWS credentials: access keys or CloudFormation-onboarded STS roles for
      cost, EKS and self-managed provisioning.
  - name: Azure Credentials
    description: Azure credentials and SSH keys.
  - name: DigitalOcean Credentials
    description: DigitalOcean credentials and SSH keys.
  - name: Hetzner Credentials
    description: Hetzner credentials and SSH keys.
  - name: OVH Credentials
    description: OVH credentials and SSH keys.
  - name: Scaleway Credentials
    description: Scaleway credentials.
  - name: UpCloud Credentials
    description: UpCloud credentials and SSH keys.
  - name: Data Source Credentials
    description: Credentials for metrics and log sources.
  - name: DNS Credentials
    description: Credentials for DNS providers.
  - name: Object Storage Buckets
    description: >-
      Buckets Ankra creates and manages on an organisation's own provider
      credentials.
  - name: DNS
    description: DNS zones and records, including custom organisation zones.
  - name: Cloudflare
    description: Cloudflare domains and the credentials behind them.
  - name: Variables
    description: Organisation- and cluster-scoped variables.
  - name: SOPS
    description: Encrypt and decrypt values with the organisation SOPS config.
  - name: Alerts
    description: Alert integrations and ingest credentials.
  - name: Notifications
    description: Notification routes and their delivery targets.
  - name: Support
    description: Support tickets.
  - name: AI Settings
    description: Organisation AI provider, model catalog and per-function model settings
paths:
  /org/service-packages/profile-pins/{profile_id}/{profile_version_id}:
    get:
      tags:
        - Services
      summary: Fingerprint an accessible profile version
      description: >-
        Requires live profiles.read, profiles.write (publication), or
        profiles.share (recipient management) permission, intersected with token
        scopes. Catalogue publication does not grant deployment permission,
        approve hosted operation, or assert runtime readiness. Shared metadata
        can remain visible after underlying profile access is revoked; contract
        reads then return 404. Profile fingerprints are rechecked on contract
        reads.
      operationId: getServiceProfilePinSession
      parameters:
        - name: profile_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
        - name: profile_version_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Success.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceProfilePin'
        '307':
          description: Session authentication required; redirects to login.
        '401':
          description: Invalid or expired authentication.
        '403':
          description: The member or token lacks the required permission.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCatalogueError'
        '404':
          description: The package or profile is inaccessible or absent.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCatalogueError'
        '409':
          description: Immutable version conflict, profile drift or invalid sharing state.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCatalogueError'
        '422':
          description: Invalid request. No supplied secret values are echoed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceCatalogueError'
        '500':
          description: Internal error. No database details are returned.
        '503':
          description: Feature availability could not be verified
      security:
        - SessionCookie: []
components:
  schemas:
    ServiceProfilePin:
      type: object
      additionalProperties: false
      properties:
        profile:
          $ref: '#/components/schemas/ServiceProfileReference'
        organisation_id:
          type: string
          format: uuid
      required:
        - profile
        - organisation_id
    ServiceCatalogueError:
      type: object
      additionalProperties: false
      properties:
        detail:
          type: string
      required:
        - detail
    ServiceProfileReference:
      type: object
      additionalProperties: false
      properties:
        id:
          type: string
          format: uuid
        version_id:
          type: string
          format: uuid
        digest:
          type: string
          pattern: ^sha256:[a-f0-9]{64}$
      required:
        - id
        - version_id
        - digest
  securitySchemes:
    SessionCookie:
      description: Browser session. Mutations also require X-Ankra-CSRF.
      in: cookie
      name: ankra_session
      type: apiKey

````